Cybersecurity and compliance training programs are now big business. According to Cybersecurity Ventures, the security awareness training market hit $5.6 billion in 2023 and is expected to surpass $10 billion in the next four years. This market boom is no surprise: cyber threats are rampant, and large-scale attacks continue making headlines. Most recently, the British Library, just to name a UK example, was hit and disrupted in its ability to function. All of this proves that every organization, no matter its size, is at risk of a breach.
Social engineering techniques, where an attacker targets the people who have access to systems (rather than the systems themselves) and manipulates them into handing over control, were the most popular malicious tactics in 2023. Businesses are, therefore, correct to recognize that people are a key vulnerability.
Annual cybersecurity awareness training is a regular feature on the calendar for most organisations in an attempt to ensure that every person within every department develops their cyber awareness skills, and is able to spot threats and respond accordingly before they become a major issue. In the face of fast-evolving security threats, this training is often outdated and can take months or even years later to bring that education to help people recognize the tactics used.
Source: https://www.techradar.com/pro/annual-cybersecurity-training-isnt-working-so-whats-the-alternative
