“Don’t start with content, start with the people.” James Mountford, Security Awareness & Culture Lead at AVEVA, on the 2026 SANS Security Awareness Report.
Read the full report → go.sans.org/imaYcs
#SecurityAwareness #SecurityCulture
Governance isn't one-third of your AI program. It's the ceiling on all of it.
The AI Govern Field Guide goes deeper on Govern, with five capabilities and five specific moves for building a program you can defend with evidence. Download here → go.sans.org/3GJKRb

ALT The image features an advertisement for the SANS AI Security Maturity Model and the Govern Field Guide. It includes the text: "Governance is the ceiling on your entire AI security program." The SANS logo is displayed, along with an image of a publication cover showcasing scales of justice and digital design elements.
GenAI, Vibe Coding, Agentic AI. The risk isn't the tools. It's the moment employees stop checking their output. Find out what the 2026 SANS Security Awareness & Culture Report says about it: go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
The longer you guess where your program sits on the maturity curve, the longer you're prioritizing blind. Get the answer now with the SANS Security Awareness & Culture Maturity Assessment:go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
A crisis exercise isn't just about response readiness. It's also where gaps in your regulatory and reporting obligations tend to surface.
SANS Cyber Crisis Exercises find them before an auditor does.
Learn more: sans.org/u/1qaC
No more guesswork on training spend. ASAP shows exactly where the gaps are. go.sans.org/XTQoEC
Employees are exploring new ways to use AI faster than many security programs can set clear guidelines. See what the most prepared organizations are doing differently. Get your copy: go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
"Trained" and "secure" aren't the same thing. Hannah Hardee with @SouthwestArilines explains the gap — live in 1 hour.
Find out what closes it → go.sans.org/LDvKvg
#SecurityAwareness #HumanRisk
Royal Roads University's Don Devenney, SANS Security Awareness & Culture Report's Advisory Board, just finished the 2026 report. His pick for the standout section: the five open-ended questions.
Download the full report here: go.sans.org/imaYcs
Completion rates don't measure culture change.
Hannah Hardee with @SouthwestAirlines, like many practitioners, are rethinking what security awareness means for an org — and sits down with Rachael Saffer to unpack it.
See how she's redefining the role → go.sans.org/LDvKvg
"Effective security starts with understanding people." Dr. Hassan Abutair, Founder & CEO of DIGISEC, on what's changing in security awareness programs. From the SANS Security Awareness Report 2026: go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
Benchmark your program. Build the case for it. Drive real change. That's what over a decade of security awareness data gets you.
Get your copy of the 2026 SANS Security Awareness & Culture Report:
go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
During a breach, executives are fielding press calls while #IR is still triaging. If they haven't rehearsed together, the communications failure compounds the security one.
🔐 Contact a SANS advisor or learn more at sans.org/u/1qaC
#Leadership
Your employees aren't your weakest link. New SANS data on why the strongest programs stop treating people as the problem and start designing security around how they work.
→ Watch the deep dive: go.sans.org/7S7IzH
→ Download the report: go.sans.org/imaYcs
Who's accountable when an AI agent causes harm?
Ciaran's answer is nearly 4,000 years old: King Hammurabi's Code.
New episode, out now 🎧 Fright or FUD
youtube.com/watch?v=_MV8At7Y…
"Your job isn't to educate humans on security — it's to educate the security team on humans."
New from @lspitzner: what comes after behavior change? → go.sans.org/Liuvs2
#SecurityAwareness #HumanRisk #SecurityCulture
The technology has changed. So has the job. The 2026 SANS Security Awareness & Culture Report breaks down what that shift means for practitioners.
go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
Report co-author @lspitzner breaks down the 2026 Security Awareness & Culture Report: AI is climbing fast on the risk list, but policy and training haven't kept pace. Full data inside → go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
AI just became the #2 human risk cited by security awareness pros, up from #4 in a year. New data from 1,700+ practitioners in the SANS 2026 Security Awareness & Culture Report.
Read the report → go.sans.org/imaYcs
#SecurityAwareness #HumanRisk
















