SANS Workforce Security & Risk Training

43% of security pros say human risk isn't a priority. That's not a resource problem. That's a mindset problem. 🧵 For those asking where to start — we put together a framework that breaks down what mature human risk programs look like at every stage → go.sans.org/A2njRd

If security slows users down, they’ll bypass it. Join us at #AISummit when @sounilyu explores what AI assistants like OpenClaw reveal about usability, adoption, & designing security people actually use. 🗓️ Apr 20–21 📍 Arlington, VA & Free Online ➡️ sans.org/u/1CNB

People aren't the weakest link. They're the primary attack vector. And compliance isn't fixing it. Find out why 👉 go.sans.org/v2WmFs #HumanRisk #SecurityAwareness #SecurityCulture

Get ready to share your knowledge — the SANS #SecAwareSummit 2026 Call for Presentations is open! Join @lspitzner and the advisory board to help foster a stronger security culture through lessons learned. Submit by Friday, April 3: go.sans.org/secaware-cfp #SecurityAwareness

🔑 One password to rule them all" sounds efficient...until it isn't. • 1 stolen password, multiple account breaches • How password managers stop the domino effect • How to get started in minutes Read on: go.sans.org/DpxjBf

Great security awareness programs don’t rely on checklists. They change how people think. Join the community advancing security culture at the SANS #SecAwareSummit. 🗓️ Aug 27–28 📍 Las Vegas, NV & Live Online ➡️ Learn More & Save Your Spot: go.sans.org/hRdIo5

Completion rates ≠ awareness maturity. The metrics that actually matter: reporting behavior, secure practice adoption, fewer repeat incidents, leadership buy-in. Know where your program stands → go.sans.org/A2njRd

Ready to inspire? The SANS #SecAwareSummit 2026 advisory board is seeking real-world voices to share practical strategies that strengthen security culture. Learn More & Submit Your Proposal by Friday, April 3: go.sans.org/secaware-cfp #SecurityAwareness

Compliance keeps you audit-ready. Culture keeps you secure. 🗳️ What's the biggest barrier to making that shift at your org?

Annual training ≠ impact. The SANS Security Awareness & Culture Maturity Model™ shows where your program really stands — across 5 stages from compliance to resilience. 🎯 Which stage are you in? → go.sans.org/A2njRd #SecurityAwareness #HumanRisk

Get ready to share your knowledge — the SANS #SecAwareSummit 2026 Call for Presentations is open! Join @lspitzner and the advisory board to help foster a stronger security culture through lessons learned. Submit by Friday, April 3: go.sans.org/secaware-cfp #SecurityAwareness

Ready to advance your security culture forward? Join @lspitzner, Hannah Hardee, and your community at the SANS #SecAwareSummit. 🗓️ Summit: Aug 27–28 💻 Training: Aug 19–26 📍 Las Vegas, NV & 🌐 Live Online ➡️ Save Your Spot: go.sans.org/hRdIo5 #SecurityAwareness

Reusing passwords is the habit cyber criminals love most. 😬 In this month’s OUCH! Newsletter, Dr. Yansi Keim breaks down: • How password reuse fuels account takeovers • Why password managers change the game • The simplest way to start today 🔗 go.sans.org/DpxjBf

“The biggest difference between measuring a computer and measuring people is emotion.” – @lspitzner Clicks don’t build culture. Emotion does. Lance shares 3 metrics that matter in 2026 for human risk. 📘 Download the full SANS Maturity Model eBook ↓ go.sans.org/A2njRd

What if your security awareness program actually changed how people think about cybersecurity? Join @lspitzner, Hannah Hardee, and your community at the SANS #SecAwareSummit on Aug 27–28 in Las Vegas, or Live Online. ➡️ go.sans.org/hRdIo5

Scams look like they belong. A “bank” call. A fraud alert. A helpful voice. They use legitimate details, so you don’t question it. Learn how attackers sound authentic – and how to catch fraud before it spreads → go.sans.org/AaI3d9 #CyberSecurity #Phishing #SecurityTips

Human risk isn’t unmanageable. It’s often misinterpreted. Four leadership blind spots continue to limit real risk reduction — especially when compliance is mistaken for maturity. From @lspitzner ↓ go.sans.org/v2WmFs #Cyberecurity #HumanRisk #SecurityCulture

Security awareness doesn't mature by accident. The SANS Security Awareness & Culture Maturity Model helps you scale progress with: 1️⃣ A stage-based roadmap 2️⃣ Practical maturity indicators 3️⃣ Metrics that move beyond completion rates Download: go.sans.org/A2njRd

People aren’t the weakest link. They’re the most targeted one. “The problem isn’t that human risk can’t be managed, it’s that most organizations are still looking at it through the wrong lens.” — @lspitzner linkedin.com/pulse/elevatin… #Leadership #HumanRisk

Scams don’t need hacking tools – they just need your trust. They sound legitimate, know personal details, and create urgency. Learn how to stay skeptical and protect your accounts → go.sans.org/AaI3d9 #Cybersecurity #Scams #OnlineSafety