Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

What Is an IdM and how to discover if you need one

IdM is an abbreviation for "Identity Management," i.e., management of user accounts. Let's turn to Wikipedia: "IdM is the security discipline that enables
Read More
Article

Gaining Shell Access via UART Interface Part 1

What is IoT The Internet of Things (IoT) is the network of physical devices, vehicles, home, appliances, vehicle, and other items embedded with electronics,
Read More
Article

PowerShell for pentesters part 1: Introduction to PowerShell and Cmdlets

PowerShell represents one of the most interesting and powerful languages for a pentesting purpose. [pkadzone zone="main_top"] So, we will try to fo
Read More
Article

The International Association of Privacy Professionals CIPP/E Certification

The Certified Information Privacy Professional/Europe (CIPP/E) certification is one of several certifications offered by the International Association of Pri
Read More
Article

The International Association of Privacy Professionals CIPM Certification

The Certified Information Privacy Manager (CIPM) is one of several popular privacy-focused certifications offered by the International Association of Privacy
Read More
Article

GIAC penetration tester (GPEN) certification

What is the GPEN certification? The GIAC® Penetration Tester (GPEN) is a vendor-neutral certification created and administered by the Global Information Ass
Read More
Article

What is the GCFE?

The GIAC® Certified Forensic Examiner (GCFE) is a vendor-neutral certification created and administered by the Global Information Assurance Certification (GI
Read More
Article

How to Identify and Detect a Phishing Email – 10 Tips

Better than the average phsishing attempt by Rick Turoczy via Flickr. Licensed under CC BY 2.0[pkadzone zone="main_top"] A perennial favorite with cybercrim
Read More
Article

What is the difference between the surface web, the deep web, and the dark web?

The Surface Web is, for all intents and purposes, the internet we all know and love to surf, the internet we use to run businesses and connect with famil
Read More
Article

Security+ Domain #6: Cryptography and PKI [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

10 Tips to Increase IoT Cameras Protection

From various security reports on IoT botnets, we know that most digital video surveillance systems used by small and medium-sized businesses contain vulnerab
Read More
Article

Android Penetration Tools Walkthrough Series: AppMon

AppMon is a suite of Python scripts that make gathering information on and penetration testing Android and iOS apps easier. AppMon integrates with the popula
Read More
Article

User and Entity Behavioral Analytics (UEBA) Overview

The human factor is one of the key issues of information security. On the one hand, humans are common sources of various threats to information security, and
Read More
Article

Finding and exploiting XXE - XML external entities injection

In this article, we will have an in-depth look at how to find and exploit XML External Entity Injection vulnerabilities. XXE (XML External Entity) as th
Read More
Article

Android penetration tools walkthrough series: Drozer

Drozer from MWR labs (formerly known as Mercury) is one of the most leveraged Android security frameworks for pentesting Android applications. Drozer enables
Read More
Article

The VPNFilter: A Powerful Botnet of More Than 500k Devices Ready to Attack

VPNFilter botnet - The discovery Security researchers at Talos group, along with colleagues from other cybersecurity firms and law enforcement agencies, have
Read More
Article

GDPR Provides Scammers with a New Golden Opportunity

GDPR latest: Fraudsters posing as banks in data protection emails phishing scam The EU General Data Protection Regulation (GDPR) has arrived, and crooks are
Read More
Article

Why Military Veterans Make Good Cybersecurity Professionals

Cybersecurity is a career that is increasingly broadening in scope as cybercriminals test the skills and resilience of security professionals by constantly c
Read More
Article

Minorities in Cybersecurity: The Importance of a Diverse Security Workforce

In an earlier article, we looked specifically at the gender gap in cybersecurity. (1) This article will look more closely at the wider area of diversity - pe
Read More
Article

GIAC Certifications Overview

GIAC® certifications are created and administered by the Global Information Assurance Certification and cover a variety of security domains. GIAC certificati
Read More
Article

A brief guide to GDPR compliance

The European Union (EU) has a new data protection law – the General Data Protection Regulation (henceforth "the GDPR" or "the Regulation") will replace the o
Read More
Article

10 things employers need to know about workplace privacy laws

In today's fast-paced business world, a lot of job-related duties can be done virtually, or either in a brick-and-mortar office. Employees can use their Smar
Read More
Article

5 Security Awareness Tips for HIPAA Compliance

Introduction The Healthcare field generates a lot of information that is very private. To address this issue, Congress passed what was originally known as th
Read More
Article

Android penetration tools walkthrough series: AndroBugs framework

Android apps are arguably the most commonly used features of smartphones on the market today. Our lives are made more organized, faster, and more streamlined
Read More