Boards spend most of their cyber time on technology. One number from the 2026 SANS Security Awareness & Culture Report works surprisingly well as a management indicator: a cybersecurity staffing ratio of at least one human-focused professional for every ten technical ones.
From ClickFix to the Prince of the Royal Kingdom of Zuvania ;-) Four phishing simulation templates for Human Defense Month 2026, ready to import into CYBERDISE. Because phishing doesn’t always have to be boring.
Business is serious enough, so this October we’re having some fun: 23 free security awareness posters across five sets, each in English and German, editable and ready for your office walls, meeting rooms and security team.
In Europe, a security awareness professional earns €92K (about $107K) on average, in North America $131K, according to the 2026 SANS Security Awareness & Culture Report. Set against everything the same report expects of the role, that is less a pay question than a priority question.
The SANS 2026 security culture action plan is barely about content. A CEO and board member on why that means rewriting your awareness strategy and bringing the SOC closer to employees.
October is Cybersecurity Awareness Month. For 2026, CYBERDISE is putting together a free Human Defense Community Kit: editable posters, infographics, games and phishing templates, in German and English.
The 2026 SANS Security Awareness & Culture Report names five barriers to program success. The fifth, weak relationships at 18%, comes last and quietly drives the other four.
I read the new SANS Security Awareness & Culture Report from a slightly unusual perspective: I manufacture security awareness software. What stayed with me was security awareness team size, not tooling — here are my eight takeaways, including a conclusion I fundamentally disagree with.
AI lets attackers produce convincing attacks at almost no cost, and people are now the largest and fastest-growing attack category. This essay explains why annual training can't keep pace, and why behaviour changes most when people repeatedly make decisions under realistic conditions.
Nearly half of all successful cyberattacks start with a negligent employee. Search engines will tell you it comes down to phishing, weak passwords and careless data handling. Look closer and all three say the same thing: this is about people.
A study by CIO / CSO / Computerwoche, based on 324 interviews with senior IT decision-makers across DACH, shows how NIS2 is reshaping the way organisations think about cybersecurity. But compliance and actual resilience are still far apart.
Behavior-oriented awareness measures success by observable change in risk behavior, not by knowledge completion, positive feedback scores or course consumption. It treats employees as human decision systems – not as information storage units.