Human error is the reason behind 80-85% of all security breaches, making it a glaring weakness in security efforts. While people-centric cybersecurity training can be dismissed as a low-tech approach, a comprehensive internal training program can often be the last line of defense in an organization.  

The technology ecosystem consists of products, processes, and people which is why the cybersecurity industry can no longer ignore its greatest cybersecurity asset: people. Cyber policies mostly center on products and processes – studies have shown that only 15% of training and awareness budgets go towards people. Security efforts must be coupled with comprehensive training to minimize human error and risks to company data in the long run. Human beings are unpredictable, but having a clear understanding of potential risks can significantly decrease the likelihood of a breach. 

Prioritizing people in cybersecurity is absolutely essential and it centers on training and behavior changes. This session will discuss how to implement psychologically-based, behavior-changing approaches to employee training and best practices for implementing and measuring effective training and awareness programs.