
Attitude and behavior are related, but they are not the same. Confusing them is one of the main reasons why many awareness programs fail to deliver lasting risk reduction.

Attitude and behavior are related, but they are not the same. Confusing them is one of the main reasons why many awareness programs fail to deliver lasting risk reduction.

Despite comprehensive security awareness training, many organizations still have cybersecurity breaches resulting from human error. This article is about the gap between risk attitude (knowing what is risky) and risk behavior (actually acting securely).

The Marks & Spencer cyber attack shows that large companies with complex organizations, many languages and multiple LMS systems need cybersecurity awareness solutions designed to meet such challenges. Otherwise, there is a risk of group-wide failure.

Phishing attacks rely heavily on psychological tricks, which is why understanding these tactics matters for cybersecurity awareness. Nearly half (47%) of successful attacks still happen because of careless employees.