In Europe, a security awareness professional earns €92K (about $107K) on average, in North America $131K, according to the 2026 SANS Security Awareness & Culture Report. Set against everything the same report expects of the role, that is less a pay question than a priority question.
The SANS 2026 security culture action plan is barely about content. A CEO and board member on why that means rewriting your awareness strategy and bringing the SOC closer to employees.
October is Cybersecurity Awareness Month. For 2026, CYBERDISE is putting together a free Human Defense Community Kit: editable posters, infographics, games and phishing templates, in German and English.
The 2026 SANS Security Awareness & Culture Report names five barriers to program success. The fifth, weak relationships at 18%, comes last and quietly drives the other four.
I read the new SANS Security Awareness & Culture Report from a slightly unusual perspective: I manufacture security awareness software. What stayed with me was security awareness team size, not tooling — here are my eight takeaways, including a conclusion I fundamentally disagree with.
AI lets attackers produce convincing attacks at almost no cost, and people are now the largest and fastest-growing attack category. This essay explains why annual training can't keep pace, and why behaviour changes most when people repeatedly make decisions under realistic conditions.
Nearly half of all successful cyberattacks start with a negligent employee. Search engines will tell you it comes down to phishing, weak passwords and careless data handling. Look closer and all three say the same thing: this is about people.
A study by CIO / CSO / Computerwoche, based on 324 interviews with senior IT decision-makers across DACH, shows how NIS2 is reshaping the way organisations think about cybersecurity. But compliance and actual resilience are still far apart.
Behavior-oriented awareness measures success by observable change in risk behavior, not by knowledge completion, positive feedback scores or course consumption. It treats employees as human decision systems – not as information storage units.
An entire industry often offers customers products and services with little benefit. In the cybersecurity awareness market, they often do not aim to change behavior.
The CYBERDISE Freemium Edition is a free phishing tool and learning environment: technically speaking, an attack simulator and a lean LMS with a content editor and user management. Here are the answers on what it includes, what it needs to run and where its limitations are.
We provide a free solution for phishing simulations and cybersecurity training. Our motivation is about effectiveness, the market and our own standards – and marketing is not the primary purpose, but a side effect.