Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

The Ultimate Security Awareness Infographics Roundup

One of the most powerful tools for conveying any sort of message is an infographic. These are like posters, but the difference is the content is linked to a
Read More
Article

An introduction to RFID

What's RFID? RFID stands for Radio Frequency Identification. It is a technology allowing devices to automatically identify information stored in a tag throu
Read More
Article

Machine Learning in Offensive Security

Contrary to popular belief, machine learning is not an invention of the 21st century. Over the last twenty years, however, several productive hardware platfo
Read More
Article

The Benefits of a Company-Run InfoSec Program Built on Training and Awareness

Are you planning to implement a company-run information security training program? Then you're not alone. In fact, more and more companies are finding reason
Read More
Article

Temple of Doom: CTF Walkthrough Part 1

In this article, we will solve a Capture the Flag (CTF) challenge which was posted on VulnHub by "0katz." As you know from the previous articles in this seri
Read More
Article

An Employer’s Guide to Employee Privacy and BYOD

Introduction For years, employers have turned to Bring-Your-Own-Device (BYOD) policies with the hope of boosting productivity. BYOD is a concept that allows
Read More
Article

Security Issues in Edge Computing and the IoT

The Internet of Things (IoT) is widely considered to be the next wave of computing, where distributed devices automate common tasks and make management possi
Read More
Article

When is Client-Side Penetration Testing Appropriate?

Client-side penetration testing, also known as internal testing, is the act of exploiting vulnerabilities in client-side application programs such as an emai
Read More
Article

10 call center security tips for protecting customer data and privacy

Call centers are particularly vulnerable to privacy breaches, and it is mainly due to what is best described as a security ripple effect. In this article, we
Read More
Article

How to Conduct a Data Privacy Impact Assessment in 2018

In May of 2018, after a two-year grace period, the General Data Protection Regulation (GDPR) was finally activated. GDPR exists to ensure that every company
Read More
Article

The 10 largest privacy threats in 2018

Looking at statistics, 2017 could be considered a record year for data breaches. For anyone following popular security-related news, this should not be a sur
Read More
Article

How to Create a Security Awareness Program

A security awareness program can be an extremely valuable tool. It helps an organization thwart active attacks and reduces the amount of weaknesses that can
Read More
Article

Vulnhub Machines Walkthrough Series — Tr0ll: 2

Today, we'll be continuing with our walkthrough series on interesting Vulnhub machines. In this article, we will see a walkthrough of the Tr0ll: 2 virtual ma
Read More
Article

4 Common Security Awareness Mistakes and How to Mitigate Them

Introduction For any company, being aware of the cyberthreat landscape is critical. There is often the mindset that most cyberattacks can be thwarted off by
Read More
Article

Vulnhub machines walkthrough series — Tr0ll: 1

Today, we'll be continuing with our walkthrough series on interesting Vulnhub machines. In this article we will see a walkthrough of the Tr0ll: 1 virtual mac
Read More
Article

Top 5 open-source and commercial secure code review tools

Code review is an indispensable part of the development process. And as such, code review tools are an indispensable part of the development team. Below is a
Read More
Article

How to comply with FERPA

Higher education is not only a popular way to expand one's knowledge; it can also open doors to employment and other opportunities. This translates into mill
Read More
Article

7 most difficult information security certifications

Demand for information security professionals has grown in the last few years, as more companies are upping the ante on protecting the security of their digi
Read More
Article

VERIS INCIDENT FRAMEWORK

The VERIS methodology was created by Verizon back in 2010. This was an effort to create an environment for the classification of specific information. The VE
Read More
Article

The GSEC certification and exam

GIAC Security Essentials (GSEC) is one of the top certifications on the market for professionals who want to prove their IT skills on security-related tasks.
Read More
Article

Ten benefits of security awareness training

Great training is the bedrock of engaged employees. Engaged means they are aware of and follow directives. Without training, employees could be making seriou
Read More
Article

The Increasing Threat of Banking Trojans and Cryptojacking

  Blockchain is one of the hottest and potentially among the most disruptive technologies today. So naturally, it's a magnet for the criminal element, w
Read More
Article

The International Association of Privacy Professionals CIPT Certification

One of the most pressing issues in the Internet age is data protection. The data of individuals and businesses must be protected from malicious entities, ma
Read More
Article

How to document security incidents for compliance in 10 steps

Many organizations are subject to regulations that enforce compliance to federal standards, such as HIPAA. This is because these organizations often operate
Read More