Global Survey Shows Users Are Not Engaged Effectively

This blog-style report summarizes survey findings from over 400 cybersecurity decision makers on security awareness training: many organizations provide training infrequently (only once a year or less), phishing simulations are often used without integrated training, and engagement is low (only 8% engage employees more than once a month). The author argues that training and measurement must be combined, highlights the real-world financial impact of social engineering on older adults, and urges organizations to improve structured, frequent awareness programs to strengthen user resilience.