Talent shortage impacts security awareness efforts

Over three-quarters of security awareness professionals are spending less than half their time on security awareness, according to a new report from SANS. This underlines the fact that awareness training is often a part-time effort, commonly assigned to staff with highly technical backgrounds but who may lack the skills needed to effectively engage their workforce in simple-to-understand terms. "Cybersecurity is no longer just about technology but people; managing human risk. Awareness programs enable security teams to do just that by not only guiding how people think about security but how they act, from the Board of Directors on down," says… [Continue Reading]