Security Awareness Reports & Resources

The 2024 SANS Security Awareness Report offers invaluable insights into the heart of Awareness Programs, leveraging real-world data from over 1000 Security Awareness Professionals across the globetouncover the most common barriers confronting security awareness teams while unlocking a treasure...

SANS most globally inclusive report to date empowers Security Awareness teams with industry benchmarking, program growth, and career development through valuable data, insights, and actionable steps...

The SANS Security Awareness Report enables organizations to make data-driven decisions on how to improve and mature awareness programs with actionable steps, downloadable tools, and lessons learned to employ immediately. This year’s report breaks down the maturity of global security awareness...

Security awareness programs have evolved from having a limited compliance focus to becoming a key part of an organization’s ability to manage its human cyber risk. The SANS 2021 Security Awareness ReportTM analyzes the data of over 1,500 security awareness professionals from around the world to...

The 2019 SANS Security Awareness Report: The Rising Era of Awareness Training is the result of collecting and analyzing responses from your peers around the globe. Nearly 1,600 of your peers, in fact. We’ve come to a thrilling conclusion: this is the era of awareness training. And as an awareness...

The first of its kind, the SANS Security Awareness Executive Report draws data from the 2018 Security Awareness Report to reveal a detailed analysis of what drives a thriving awareness program. It presents actionable insight for executives on how to assist employees in their effort to build and...

In this white paper, you'll gain best practices for utilizing behavioral risk assessments to more effectively manage and measure their human risk, and in the process, embed a much stronger security culture.

Download this tip sheet and get top tips to kickstart your compliance efforts while learning why the PCI DSS standard was created and who it serves, which organizations are required to be compliant, and the differences between the technical controls and human controls required.