Program models
What is security awareness training?
Also called SAT.
Security awareness training is any structured program that teaches people to recognize and respond to cybersecurity threats — phishing, social engineering, malware and password hygiene.
In more detail
It is the umbrella term the whole category sits under, which is also why it means very little on its own. Two products both called security awareness training can differ entirely in who operates the program, how often it runs, and whether anyone measures behavior rather than attendance.
Why it matters
Compliance frameworks and cyber insurance questionnaires almost all name it explicitly, so most organizations end up buying it whether or not they went looking.
Related terms
A managed security awareness program in which training, phishing simulations, reinforcement and client-ready reporting all run continuously without an administrator operating the platform.
A service model where the vendor designs, runs and reports on the entire security awareness program, end to end.
The percentage of assigned training that people actually finish.
Vocabulary is the easy part. Behavior is the job.
Thirty minutes, a live account, and a straight answer about where your people actually stand.