SAT effectiveness: Are security awareness training programs reducing human risk?

The report argues that despite rising budgets and high confidence in security awareness training, human-error-driven security incidents are increasing, revealing a gap between perception and reality. It attributes this to legacy, infrequent, and generic programs that fail to keep pace with modern, AI-enabled threats, and recommends a managed, expert-driven approach with frequent, bite-sized, interactive, and personalized content based on real-world tradecraft to actually reduce human risk.