Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

SolarWinds LEM

SolarWinds Log & Event Manager (LEM) is a security information and event management (SIEM) system. SolarWinds LEM is an end-to-end SIEM that groups, corr
Read More
Article

Becoming a Cybersecurity Practitioner (CSXP)

Introduction The growing concern of cybercrime is pushing more and more companies to staff their IT teams with professionals that are able to implement prop
Read More
Article

10 best jobs in information security

Cybersecurity includes a wide variety of different roles. Here are 10 of the best you may want to consider pursuing.
Read More
Article

Basic pentesting: 2 — CTF walkthrough

In this article, we will try to solve another Capture the Flag (CTF) challenge. This CTF was posted on VulnHub by Hadi Mene and is part of a Basic Pentesting
Read More
Article

Breaking into the boys club: Career advice for aspiring female cybersecurity pros

When it comes to recruiting new talent, the cybersecurity industry is facing a big challenge. The supply of qualified candidates is far short of demand: data
Read More
Article

The DoD IAT level 2

The DoD IAT level 2 overview The Department of Defense (DoD) Directive 8570 can be specifically defined as follows: ". . . . guidance and procedures for the
Read More
Article

How to Achieve DoD 8570 IAM Level III Compliance

A definitive guide to achieving DoD 8570 IAM Level III Compliance
Read More
Article

How to achieve DoD 8570 IAT level I compliance

Best practices for achieving DoD 8570 IAT level I compliance
Read More
Article

What is DoD 8570?

Department of Defense Directive 8570, or DoDD 8570 provides guidance and procedures for the training, certification, and management of all government employe
Read More
Article

International Association of Privacy Professionals (IAPP): Certification overview

Learn about the IAPP, the different privacy certifications they offer and how they can help your career.
Read More
Article

How to Detect and Prevent Secure Document Phishing Attacks

Secure document phishing attacks are some of the latest in client endpoint exploits that have been plaguing the computing world. While these phishing attempt
Read More
Article

WordPress Phishing Scams: What Every User Needs to Know

WordPress powers 30% of the web and is by far the largest content management system (CMS). It's easy-to-use and has fans that range from regular users to dev
Read More
Article

Security awareness, training, and education

Learning is a continuum: it starts with awareness, builds to training, and evolves into education. We can use the definitions provided by NIST for further cl
Read More
Article

How to Detect and Prevent Direct Deposit Phishing Scams

The same digital revolution that's ushered in an era of business innovation has been as much of a boon for the enterprising criminal set. Moreover, organizat
Read More
Article

The phishing response playbook

As we know, phishing remains one of the most well-known forms of social engineering. Although this form of threat has been in existence for a long time, the
Read More
Article

Anti-phishing training vs. software: Does security awareness training work?

Due to the increasing advances in today's technology, endpoint protection, and security software solutions are becoming even better at protecting your data.
Read More
Article

Threat Hunting for Mismatched Port – Application Traffic

  Indicators of compromise or IOCs are evidence indicating a breach of security. IOC includes virus signature, IP address, Hash value of Malware, Malici
Read More
Article

The 6 Latest Phishing Emails to Avoid in 2018

Despite increased user awareness, phishing remains one of the biggest security threats to the enterprise. Of 1,450 data breach incidents in 2017, Verizon fou
Read More
Article

How to prevent CEO fraud – 10 tips

CEO fraud scams are on the rise. They aren't that different than other phishing emails, except most get it and think it's from the boss. The FBI labels these
Read More
Article

How to add a phishing notification button to outlook

"Phishing" is a form of Internet scam that has become much more common in the past few years. A phishing attempt will usually come in the form of an email th
Read More
Article

The Trends in Spear Phishing Attacks

Introduction As we know it today, Phishing has become one of the most commonly used tactics by the Cyber attacker to garner personal information and data. Th
Read More
Article

Top 10 anti-phishing email templates

As phishing attacks evolve, your employees need to stay ahead of the curve. Here are 10 proven anti-phishing email templates to help keep your team sharp.
Read More
Article

The 10 best practices for identifying and mitigating phishing

Phishing (a form of social engineering) is escalating in both frequency and sophistication; consequently, it is even more challenging to defend against cyber
Read More
Article

“Quiet Skies” – A TSA Surveillance Program Targets Ordinary U.S. Citizens

Here we are once more to discuss another surveillance program that could threaten the privacy of U.S. citizens. This time, our topic is the previously-undisc
Read More