Making it stick: How to get the most out of cybersecurity training

The article argues that traditional, compliance-focused security awareness training is forgettable and ineffective, advocating instead for engaging, story-driven, gamified simulations that build durable, instinctive security behaviors. Using a fictional Business Email Compromise (BEC) vignette, it underscores human factors in breaches, cites the FBI’s US$55.5B BEC losses (2013–2023) and the rise of AI deepfake-enabled scams, and recommends realistic phishing and scenario-based exercises to create emotional memory anchors—concluding with a promotion of ESET’s cybersecurity awareness training.