Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Surviving cybersecurity burnout: Tips from industry experts

Cybersecurity burnout is common due to the rising tide of potential threats and rampant cybercrime. Here’s what you need to know.
Read More
Webcast & video

CompTIA Security+: Everything you need to know about the SY0-701 update

CompTIA’s Security+, the most popular cybersecurity certification in the world, is getting an overhaul! The updated exam (from SY0-601 to SY0-701) re-aligns the certification to match the most in-demand entry-level cybersecurity skills and trends heading into 2024.
Watch Now
Article

Boeing Lockbit ransomware attack, Apple’s vulnerability and WhatsApp mods spyware

Boeing confirms ransomware attack, researchers spot WhatsApp mods with dangerous spyware and Apple’s "Find My" Network vulnerability. All this and more.
Read More
Podcast

The role of film storytelling in making education stick

Infosec IQ’s director of production, Steve Concotelli, talks about Work Bytes, Infosec's award-winning security awareness series.
Listen Now
Podcast

The future of passwords

Cyber Work Podcast | 2023

Tomas Smalakys, CTO at NordPass, talks about the future of passwords.
Listen Now
Webcast & video

Closing the skills gap: ISACA and Infosec leadership on the future of training

Explore the future of IT and cybersecurity training in this discussion with Infosec GM Bret Fund and ISACA CEO Erik Prusch.
Watch Now
Article

Biggest cybersecurity mistakes by large organizations

Find out what large businesses and organizations need to do in order to be safe from cyberattacks.
Read More
Article

How to make a mid-career change to cybersecurity

Since 2020, professionals quietly shifted to new job roles; 1 in 5 switched to tech. Dara Gibson explains what it's like to enter Cybersecurity mid-career.
Read More
Article

Octo Tempest hacking group and new iLeakage attack

Octo Tempest’s financial exploits, new iLeakage attack on Safari web browser and Flipper Zero Bluetooth spam. All this and more!
Read More
Article

Why aren’t more women in cybersecurity, and how can we fix it?

Cybersecurity has a historic lack of women in its workforce, especially in leadership roles. Paula Bratcher Ratliff and Women Impact Tech aim to remedy that.
Read More
Article

ChatGPT and the strengths and limitations of cognitive AI

ChatGPT will change things in IT, cybersecurity and society at large in significant ways. But what are its strengths and weaknesses?
Read More
Podcast

AI and the rise of DDoS attacks

Cyber Work Podcast | 2023

Anna Claiborne from Zayo talks about the spike of DDoS attacks they saw in the past year.
Listen Now
Article

Okta support system breach and Google Ads fake KeePass campaign

Okta hack caused by stolen credentials, fake KeePass site using Google Ads to spread malware, and North Korean IT scam crackdown. All this and more!
Read More
Podcast

How generative AI can be used by bad actors

Cyber Work Podcast | 2023

Oliver Tavakoli from VectraAI returns to talk generative AI and how bad actors are already using it.
Listen Now
Article

4 common social media scams (and how to avoid them)

Social media scams are constantly evolving to get your data. Keep aware of scammer techniques and the best ways to avoid them.
Read More
Article

Skype DarkGate malware, Shadow PC breach and AvosLocker ransomware warning

DarkGate hackers distribute malware via Skype, PC gaming service Shadow PC breached and AvosLocker ransomware campaign. All this and more.
Read More
Podcast

How AI is affecting GRC and the future of cybersecurity

Cyber Work Podcast | 2023

6clicks has introduced Ask Hailey, an AI-based governance risk and compliance (GRC) tool that promises to move the work of GRC into a new era.
Listen Now
Article

Disaster recovery: What's missing in your cyber emergency response?

The cybersecurity industry has a lot to learn from emergency response and disaster recovery, believes Epicenter Innovation CEO Christopher Tarantino.
Read More
Article

Security architect salary

Discover the average salary for security architects and the earning potential in this specialized field of information security.
Read More
Article

23andMe data theft, MGM’s $100M ransomware loss and the Azure VM breach

23andMe user data scraped using credential stuffing, MGM suffers a $100 million hit from a ransomware attack and the Azure VM breach. All this and more.
Read More
Article

Malicious Bing Chat ads and FBI’s dual ransomware warning

Hackers inject malicious advertisements into Bing Chat responses, FBI warns of dual ransomware campaigns and the Exim zero-day flaw. All this and more.
Read More
Article

From theory to practice: Designing a successful security awareness training program

Making a security awareness training program? See this step-by-step plan to transform your concept into hands-on training.
Read More
Article

Understanding maturity models in cybersecurity: Definition and types

Explore the essentials of cybersecurity maturity models, their types, implementation steps and benefits to fortify your organization’s cyber defenses.
Read More
Article

Cybersecurity automation: Tips to do it right in your organization

Hyperautomation provides a more business-driven, disciplined approach to automating as many business and IT processes as possible.
Read More