{"id":2845,"date":"2022-08-20T12:00:00","date_gmt":"2022-08-20T12:00:00","guid":{"rendered":"https:\/\/www.hostrw.com\/kp\/?p=2845"},"modified":"2022-07-04T16:00:44","modified_gmt":"2022-07-04T14:00:44","slug":"how-often-do-you-need-to-train-employees-on-cybersecurity-awareness","status":"publish","type":"post","link":"https:\/\/www.hostrw.com\/kp\/en\/how-often-do-you-need-to-train-employees-on-cybersecurity-awareness\/","title":{"rendered":"How Often Do You Need to Train Employees on Cybersecurity Awareness?"},"content":{"rendered":"

You\u2019ve completed your annual phishing training. This includes teaching employees how to spot phishing emails. You\u2019re feeling good about it. That is until about 5-6 months later. Your company suffers a costly ransomware infection due to a click on a phishing link.<\/p>

You wonder why you seem to need to train on the same information every year. But you still suffer from security incidents. The problem is that you\u2019re not training your employees often enough.<\/p>

People can\u2019t change behaviors if training isn\u2019t reinforced. They can also easily forget what they\u2019ve learned after several months go by.<\/p>

So, how often is often enough to improve your team\u2019s cybersecurity awareness? It turns out that training every four months is the \u201csweet spot.\u201d This is when you see more consistent results in your IT security.<\/p>

Why Is Cybersecurity Awareness Training Each 4-Months Recommended?<\/h3>

So, where does this four-month recommendation come from? There was a study<\/a> presented at the USENIX SOUPS security conference recently. It looked at users\u2019 ability to detect phishing emails versus training frequency. It looked at training on phishing awareness and IT security.<\/p>

Employees took phishing identification tests at several different time increments:<\/p>