Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Powerful Skygofree Spyware Was Already Reported and Analyzed In 2017

The Skygofree spyware analyzed by Kaspersky today was first spotted by the researcher Lukas Stefanko and the first analysis was published last year by the ex
Read More
Article

The Five Largest Ransomware Attacks of 2017

The Year 2017 had a lot of sleepless nights for the security professional, IT admins, etc. as huge cyber-attacks marred it. Targets of those cyber-attacks we
Read More
Article

A Step-by-Step Guide to Data Security Compliance by Industry

Knowing what expertise is available and which standards are relevant to your sector are the first steps to ensure organizations are regulation compliant.
Read More
Article

Security Risk Management Considerations for Small & Medium-Sized Business

Risk is inherent in any type of business endeavor whether you have a small or massive multinational business. When it comes to small- and medium-sized busine
Read More
Article

A cyber insurance policy checklist

Use this checklist to help you purchase the best cyber insurance policy for your company. Step 1. Determine if you need cyber insurance. Things to consider
Read More
Article

Malware in dark web

The Dark Web plays a crucial role in the criminal underground especially for the communities of malware developers; the principal darknets are privileged env
Read More
Article

SQL Injection Protection in Cloud Systems

SQL Injection Structural Query Language (SQL) is a language used to program and manage data in relational databases. Originating in 1986, SQL has gained so m
Read More
Article

How to Select & Implement Effective Risk Management Standards & Frameworks

According to ISO 31000, the family of standards relating to risk management codified by the International Organization for Standardization, risks can be defi
Read More
Article

Security+: Types of Mitigation and Deterrent Techniques (SY0-401) [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Security+: PKI, Certificate Management, and Associated Components (SY0-401) [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

10 Questions You Should Ask Vendors About Their Risk Management Program

Our supply chains are becoming ever more complex, not only in terms of the intricate web of suppliers and sub-suppliers, but also in the technologies used wi
Read More
Article

How Security Awareness Training Can Protect Law Enforcement

Why Does the Law Enforcement Industry Need Security Awareness? Law enforcement is not immune to cyber attacks. In fact, the sector faces multiple threats. Ho
Read More
Article

How to Assess & Manage Third-Party Vendor Security Risks

One of the most famous and largest cyberattacks of all time was the Target breach of 2013. The attack exposed the data records of more than 70 million people
Read More
Article

Understanding the Link Between Business, Operational & Security Risks

When it comes to risk planning and mitigation, it is important for you as an information security professional to understand the difference between a securit
Read More
Article

5 best password auditing tools

A single weak password exposes your entire network to an external threat. Password hacking is one of the most critical and commonly exploited network securit
Read More
Article

5 Steps to Create a Security Culture within your Organization

Introduction We have a problem Houston...and its name is cybercrime. In 2017, we saw some of the biggest breaches of all time, including the Equifax breach,
Read More
Article

Top 10 Threats to Healthcare Security

The year 2017 was the year that cyberattacks made healthcare sick. In the UK, a catastrophic ransomware attack in the form of WannaCry caused havoc across at
Read More
Article

A Look at Data Security Compliance & Regulations by Industry

Understanding and complying with regulations provides companies with business opportunities and reduces risk. To many, information security looks to be go
Read More
Article

10 Ways GDPR Will Affect Data Collection and Use

The General Data Protection Regulation (GDPR) is almost upon us. May 25th, 2018 is the auspicious day that begins the enactment of the regulation. In a surve
Read More
Article

How Cyber Insurance Can Safeguard Your Business - A General Guide

Cyber insurance is also known as cyber liability insurance coverage. It helps businesses and individuals protect themselves from Internet- and IT infrastruct
Read More
Article

An Examination of the Security Threats Posed to a Mobile Wallet Infrastructure

Introduction Our last article reviewed in depth just what precisely a Mobile Wallet is, and how it works. In summary, it is essentially a mobile app from whi
Read More
Article

An Overview of the Mobile Wallet and Apple Pay

Introduction There is no doubt that today, the Smartphone is fast becoming an extension of both our personal and professional lives. For example, not only ca
Read More
Article

Computer Forensics: Overview of Software Forensics

Introduction The number of instances and severity of computer-based attacks such as viruses and worms, Trojan horses, logic bombs, and plagiarism of software
Read More
Article

Certified Wireless Security Specialist (CWSS) Salary

If looking for a good niche in the information technology sector, a professional might want to explore opportunities in the growing market for wireless-relat
Read More