Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Expected Ransomware Evolution in Coming Years

The tech world has been stricken with digital assaults this year and ransomware has been at the focal point of everything. So far, this year we have seen two
Read More
Article

German Intelligence First Developed Attacks Against Tor

Online anonymity represents a serious problem for government and law enforcement agencies; it has been debated a long about the difficulties to investigate w
Read More
Article

How to draft an incident response policy

Simultaneously with their growing online presence, companies and individuals become increasingly susceptible to cyber-security attacks. Most organizations pr
Read More
Article

Innovative Methods of Information Security Training

Section 1. Introduction More and more organizations providing information security training apply integrative training, i.e., designing training programs th
Read More
Article

8 tips for IT certification success

Are you ready to ace your next IT certification exam? Here are some tips to ensure you have a smooth exam day.
Read More
Article

Equifax Breach Exposes Personal Information of 44% of U.S. Consumers

Last week, Equifax announced a data breach impacting 143 million U.S. consumers. According to the company’s release, information accessed includes names, Soc
Read More
Article

DragonFly 2.0: The Alleged Nation-State Actor Hits the Energy Sector Again

Security experts at Symantec have uncovered a hacking campaign against companies in the energy industry that appears to be an activity linked to the infamous
Read More
Article

Russian APT Groups Continue Their Stealthy Operations

Russian APT groups continue their cyber espionage activities against governments and organizations worldwide, in this post I have grouped the details related
Read More
Article

Acid Server: CTF Walkthrough

In this article, we will learn to solve another Capture the Flag (CTF) challenge which was posted on VulnHub by Avinash Kumar Thapa. The author of the challe
Read More
Article

Average Network Security Administrator Salary

Network administrators work on all aspects of IT infrastructure. As a network administrator, you must support desktops and interconnectivity within the compa
Read More
Article

Top 10 Anti-Phishing Best Practices

Emails are one of the major modes of communication today. Companies rely heavily on emails when conducting their day-to-day operations. Management sends out
Read More
Article

Intelligent Personal Assistant (IPA) Sample Security Policy

One of the earliest (a little bit intelligent) digital personal assistants was the annoying Microsoft Clippit, circa 1997. The animated MS Office paperclip w
Read More
Article

OWASP Top 10 #9: Using Components With Known Vulnerabilities

It does not take a rocket scientist to understand that using components with known vulnerabilities a very poor choice for protecting your web application or
Read More
Article

Anti-Phishing Laws & Regulations

Information security has never been more important. New threats are rising and old threats still lurk. Data has become the new currency and hackers have swit
Read More
Article

Anti-Phishing Services: Pros and Cons

What Is Anti-Phishing?  Anti-phishing includes the number of techniques used to prevent phishing attacks against the individual’s machine or organizations. S
Read More
Article

Anti-Phishing Hardware & Software

Phishing is one of the most potent and most commonly tried internet scams of recent times. In phishing, the attackers attempt to trick a potential victim to
Read More
Article

Top 5 Questions to Ask Your Vendors about Their Security Policies

Cyber security is one of the most critical issues the U.S. faces today. The threats are real, and the need is pressing. The cyber security status is unstable
Read More
Article

Security Awareness Statistics

Security breaches have grave consequences for organizations. In 2015, the average cost of corporate data breaches increased by 15% compared to the previous y
Read More
Article

What Kind of Security Training Does HIPAA Say I Need to Provide?

Patient health records are highly sought after by cyber-criminals because they can exploit them in a multitude of ways. On the “dark web,” stolen medical dat
Read More
Article

PCI Security Awareness: Who Needs Training and Compliance?

With financial reward being one of the main motives behind online frauds, the Payment Card Industry (PCI) is constantly under cyber-attack by hackers. The bu
Read More
Article

Security Awareness Compliance Requirements: Understanding Regulatory Mandates

Information security is of paramount importance today. It’s vital that sensitive information be protected from threats both internal and external. Those thre
Read More
Article

Managing Wireless Network Security

Why Is Network Security Important? Keeping your network secure is vitally important. Your network is the lifeblood of your company and it is responsible for
Read More
Article

Security Awareness for Sales Representatives

The performance of salespersons is usually measured in terms of revenue, not in terms of security awareness. As a result, most of their efforts are geared to
Read More
Article

Top 10 Threats from Unprotected Intelligent Personal Assistants (IPAs)

1.   Introduction Intelligence personal assistants (IPA), also known as virtual personal assistant (VPA), is the rising star in the high technology industry.
Read More