Glossary
What is security awareness training?
Security awareness training is an ongoing programme that teaches employees to recognise and respond to security threats such as phishing, social engineering and unsafe data handling.
- Also known as
- SAT, cybersecurity awareness training
- Formats
- Courses, micro-learning, simulations, assessments
- Typical goal
- Safer everyday behaviour and evidence for audits
- Related term
- Phishing simulation
How it works
Teach, test,
reinforce, record.
- 01
Teach
Courses and short lessons cover phishing, passwords, data handling, safe messaging and incident reporting.
- 02
Test
Simulations and assessments check whether knowledge turns into behaviour.
- 03
Reinforce
Just-in-time lessons and micro-learning follow up where people struggled.
- 04
Record
Completions, certificates, results and policy acknowledgements build a record for audits.
Close concepts
Awareness training vs
just-in-time vs micro-learning.
| Security awareness training | Just-in-time training | Micro-learning | |
|---|---|---|---|
| What it is | The overall programme | A lesson triggered by an action | A lesson format |
| When it happens | Across the year | Right after a risky action | Whenever it fits the workday |
| Typical length | Courses plus ongoing activities | A minute or two | A few minutes |
| Best for | Broad coverage and records | Learning from a real mistake | Reinforcing one behaviour at a time |
Questions buyers ask
Frequently asked questions.
What topics does security awareness training cover?
Common topics include phishing and social engineering, passwords and authentication, data handling, safe use of messaging and AI tools, remote working and how to report incidents.
Is security awareness training required?
Many security frameworks and regulations expect an awareness programme for staff. Check which obligations apply to your organisation; see our compliance pages for context. Your auditor decides compliance.
How often should employees be trained?
Ongoing training through the year, with short lessons and regular simulations, tends to work better than a single annual course.
Let’s connect the dots
See the human risk.
Change what happens next.
Bring your awareness program, your reporting workflow, or the question your current metrics cannot answer.
Book a demo