Skip to content

Topic: research

An organisation chart of a security team: 49 people working on technology and a single person responsible for the human side of cybersecurity
awarenessYour CISO-to-Awareness Ratio Is Broken. It's Sabotaging Your Defense

Boards spend most of their cyber time on technology. One number from the 2026 SANS Security Awareness & Culture Report works surprisingly well as a management indicator: a cybersecurity staffing ratio of at least one human-focused professional for every ten technical ones.

An employee shows a colleague from the SOC the suspicious message she just reported on her phone, under the headline From Employee Alert to SOC Action
awarenessWe Finally Have a Flawless Security Culture Action Plan

The SANS 2026 security culture action plan is barely about content. A CEO and board member on why that means rewriting your awareness strategy and bringing the SOC closer to employees.

Three colleagues reviewing an awareness campaign together, with a callout reading approximately three dedicated awareness FTEs
research8 Hard Truths About Security Awareness Team Size (SANS 2026)

I read the new SANS Security Awareness & Culture Report from a slightly unusual perspective: I manufacture security awareness software. What stayed with me was security awareness team size, not tooling — here are my eight takeaways, including a conclusion I fundamentally disagree with.

Security operations centre with analysts silhouetted against a wall of dashboards showing rising cost curves in magenta and cyan
research$4.99 Million: What a Data Breach Costs in 2026

IBM’s Cost of a Data Breach Report 2026 puts the global average cost of a breach at a record USD 4.99 million. Two other figures in the same report tell you more: 63% and 247.

CYBERDISE Behavioral Defense Engineering: three overlapping circles, the signal, the feedback loop and instant immunization, above the line Awareness doesn't stop attacks. Behavior does. Speed contains.
bdeAwareness doesn't stop attacks. Behavior does.

For two decades, security awareness programs have transferred theoretical knowledge — and measurable organizational risk stayed high. With Behavioral Defense Engineering and platform version V3.2, CYBERDISE treats human behavior as an operational part of IT security instead of a compliance checkbox.

Collage "IBM Data Breach Report 2025": annotated report pages and charts, e.g. 32% of breaches resulting in fines.
researchWhat the 2025 IBM Data Breach Report Really Says?

The IBM Cost of a Data Breach Report has been published every year for two decades. It’s often read for the numbers, but this year’s report says something more fundamental about cybersecurity awareness.

Title card: "IT-SA 365 Insights: cybersecurity trends and data you need to know", a speaker in a CYBERDISE shirt on stage
researchCybersecurity Trends and Data You Need to Know: IT-SA 365 INSIGHTS

it-sa Expo & Congress in Nuremberg is one of Europe's leading cybersecurity events, and this year it set new records with 25,830 trade visitors from 65 countries and 897 exhibitors. We've sifted through the highlights for practical takeaways, from awareness training to protecting critical infrastructures.