User Training and Testing

In this section, we will cover two of the more common and executed components of your program. Traditionally, there has most likely been some required cybersecurity training, whether it be when you were onboarded as a new employee or on an annual basis. For some, there may be nothing in place.

Moving forward, more focus and effort are needed around employee training activities, which we will cover in more detail throughout this section. The same applies to user testing; there may have been some phishing type of simulation sent to your users on an ad hoc basis, or maybe never at all. Unfortunately, this will not suffice, and the user testing activities need significant improvement from what may have been executed in the past.

User Training

First, let’s review the user training components for your overall user awareness, training, and testing program. Training is a critical component of everything we do, not just in life, but more importantly...