15
Security awareness
(feddit.org)
Sometimes I wonder whether all this "security awareness training" has any effect at all.
You say that but do you have any objective data?
I'd love to see studies of phishing success in orgs that do vs. do not have regular trainings.
I bet it works like PSA advertising. It's stuff everyone should know and 98% of people already do. But it also helps keep the issues closer to conscious awareness and is actually educational for the 2%
There is a 2025 study that was widely reported:
arXiv:2506.19899