Importance Of Cyber Awareness Training

The importance of cyber awareness training comes down to where attacks actually succeed. The large majority begin by persuading a person rather than by defeating a technical control.

That is not a comment on anyone’s competence. It reflects the design of the attacks, which are built to look ordinary and to arrive at a moment when someone is busy.

A convincing email from a compromised supplier account. A payment request that matches a real project. A phone call from someone who knows enough detail to sound legitimate.

None of that is defeated by better filtering, because nothing about the message is technically wrong. The only control that operates at that point is a person deciding to verify.

That is what awareness training buys, and it is why it sits alongside technical controls rather than beneath them.

The Australian Cyber Security Centre publishes current guidance. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s cyber security course and workplace compliance courses.