2018 Security Awareness Report

Summary

The current security awareness landscape faces numerous challenges such as limited time, resources, and communication issues, which hinder program development. With security breaches becoming more frequent, the need for robust programs is growing. The SANS Security Awareness Annual Report addresses these issues by providing insights from over 1,700 professionals, offering data-driven analysis and practical advice to enhance security awareness programs. The report emphasizes learning from peers and avoiding common mistakes, helping organizations improve their efforts and mature their programs effectively.

Takeaways

• 🔒 Security awareness programs face numerous challenges, including lack of time, resources, and communication.
• 📈 Security breaches are becoming more common, increasing the pressure to maintain effective security awareness programs.
• 📊 The SANS Security Awareness Annual Report examines common challenges and issues organizations face in building these programs.
• 🛠️ Using a maturity model as a guide, the report provides insights and practical tips for improving security awareness programs.
• 🧑‍🤝‍🧑 Survey data from over 1,700 security awareness professionals is analyzed to offer best practices.
• 🚫 The report emphasizes avoiding common mistakes that hinder the success of security awareness programs.
• 📚 Learning from peers and real-world examples is key to growing and maturing security awareness programs.
• 🏗️ Building a successful security awareness program requires addressing unique blockers and implementing tailored solutions.
• 🔄 Continuous improvement is critical to keeping security awareness programs effective and relevant.
• ⚡ The report encourages taking immediate actions based on insights to improve program maturity and resilience.

Q & A

What are the main challenges faced in today's security awareness environment?

The main challenges include lack of time, insufficient resources, and communication issues, among others.

How do these challenges impact the development of security awareness programs?

Each challenge acts as a unique blocker, making it difficult to mature security awareness programs effectively.

Why is there increased pressure to maintain a robust security awareness program?

Security breaches are becoming more common, which increases the urgency and pressure to produce and maintain a strong security awareness program.

What is the SANS Security Awareness Annual Report?

The SANS Security Awareness Annual Report is a comprehensive examination of the challenges and issues organizations face when building their security awareness programs.

How does the report help in building successful security awareness programs?

The report provides insights and practical tips, based on survey data from over 1,700 security awareness professionals, to help improve security awareness programs.

What is the maturity model mentioned in the transcript?

The maturity model is a framework used to guide the analysis of security awareness programs, helping organizations assess and improve the maturity of their programs.

How can organizations avoid common mistakes in building security awareness programs?

Organizations can learn from the experiences of peers and avoid common pitfalls by following the insights and tips provided in the SANS report.

What type of data is used in the SANS report for analysis?

The report uses survey data from over 1,700 security awareness professionals to analyze and offer recommendations.

What is the key message of the report regarding the growth of security awareness programs?

The key message is that it’s time to grow and mature security awareness programs to make them more successful.

What practical steps does the report suggest for improving security awareness programs?

The report offers practical tips based on survey data, including learning from peers, using the maturity model, and avoiding common mistakes to immediately improve security awareness programs.