Skip to main content

Save or Share this Report

For Security & Risk Professionals

The Business Case For Security Awareness And Training

How To Measure Changes In Security Behavior And Culture

April 11, 2019


Why Read This Report

Everyone has long recognized the importance of the human element to cybersecurity, yet we still see staff acting unwisely and inviting threat actors into our networks. It's clear that something isn't working. Historically, security awareness and training (SA&T) efforts have been half-hearted and investment in more sophisticated solutions has been limited. But done right, SA&T initiatives can foster security-aware behaviors and change the culture throughout your organization. This report shows security and risk (S&R) pros how to measure the benefit of SA&T initiatives and solutions to justify more investment. This is an update of a previously published report; Forrester reviews and update it periodically for continued relevance and accuracy.

Get Access

Already a Client?

Log in to read this document.

Become a Forrester Client

Customers are the new market-makers, reshaping industries and changing how businesses compete and win. Success depends on how well and how fast you respond. Forrester Research gives you insights and frameworks aligned to your role to shorten the time between a great idea and a great outcome, helping your teams win in the age of the customer. Contact us to learn more.

Purchase Report

This report is available for individual purchase ($745 USD).


Table of Contents

  • CISOs Are Struggling To Justify SA&T Initiatives
  • Measure The Benefit Of SA&T Through Culture And Behavior Change
  • Recommendations

  • Use All Constituents To Measure The Benefit Of Culture Change
  • Supplemental Material
  • Related Research Documents

Recommended Research