[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-359205-105":53,"doc-detail-359205-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","awareness-training-program-best-practice","Awareness Training - Program Best Practice","","Awareness Training - Program Best Practice describes why traditional security awareness efforts often fail to change behavior, citing that many breaches involve human error. It argues that shifting employees from compliance to commitment improves outcomes, and presents results from Mimecast Awareness Training. The document lays out a five-stage program—analyze, create, implement, evaluate, and repeat—designed to change behavior, strengthen knowledge retention, and reduce organizational risk with short monthly training.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/awareness-training-program-best-practice/359205/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/awareness-training-program-best-practice/359205.png","ImageObject",442,249,{"name":88,"@type":89},"นรินทร์","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-24","2026-09-23",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",8,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"Why does the document say security awareness training often fails to deliver results?","Question",{"text":109,"@type":110},"It states that efforts to reduce human error are failing and that organizations spend heavily without seeing behavior change. It also argues that harsh reprimands without context do not address the underlying causes of risky actions.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"What is the recommended approach to change employee security behavior?",{"text":114,"@type":110},"The document emphasizes capturing employees’ “hearts and minds” by reframing security from something they have to do (compliance) to something they want to do (commitment).",{"name":116,"@type":107,"acceptedAnswer":117},"What are the five stages in the awareness training program?",{"text":118,"@type":110},"The five stages are Analyze, Create, Implement, Evaluate, and Repeat (repeat steps 1–4). Each stage supports building a measurable, ongoing program rather than a one-time deployment.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},359205,1791732389,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":76},2336475104957,"https://ap-avatar.wpscdn.com/avatar/22000c4c6bd8a5076e1?x-image-process=image/resize,m_fixed,w_180,h_180&k=1787554080175789136","Awareness Training  \nProgram Best Practice  \nAwareness Training | Program Best Practice  \nOur Value Proposition  \nResearch shows that 90%+ of breaches involve human error1, and in 2018, organizations faced a 27% chance of suffering a major data breach involving 10,000 records or more2.  \nThose types of massive breaches came with an average cost of four million dollars each toremediate.3 Clearly, human error is not to betaken lightly. People are – and likely always will be – the weak link in the chain. Yet, efforts to reduce the risk they represent are failing. Organizations are pouring billions into security awareness training, but these investments are not translating into results. In fact, the probability that companies of all types and sizes will experience a security breach is greater today than it was yesterday. Something needs to change.  \nWe believe harsh reprimands towards employees without context are not the way to tackle human error and change behavior. Instead, it’s imperative to capture hearts and minds to change an employee’s  \nview of security from something they have todo (compliance) to something they want todo (commitment) .  \nImplementing Mimecast Awareness Training with our recommended best practices has proven to change user behavior. Users at companies that don’t have Mimecast Awareness Training are 5.2 times more likely to click on bad links.4  \nThe Approach  \nMimecast Awareness Training is successful for employees, the organization, and business leaders when broken down into these five stages.  \nThis strategy can be broken down into five stages:  \n1. Analyze – Know your company’s strengths, weaknesses, threats and opportunities (SWOT) for a successful security program.  \n2. Create – Create the plan and set the annual goals for your awareness training program.  \n3. Implement – Implement the plan with a detailed approach, engaging your users and stakeholders.  \n4. Evaluate – Evaluate your plan and make corrections where needed to be successful.  \n5. Repeat – Repeat step 1 – 4  \nOur security awareness training program is designed to change behavior, improve knowledge and retention of core security issues, and ultimately lower risk. The punch line is training that takes 2 to 3 minutes a month, a tolerable ask of today’s busy employee.  \n1 Verizon Data Breach Investigations Report 2018 2-4. Mimecast 100 Days of Coronavirus Report 2020  \n2  \nAwareness Training | Program Best Practice  \nStage 1-Analyze  \nWithout analysis, it’s impossible to determine what training is necessary, and how you should be testing that training on an ongoing basis.  \n1. What does your company do (i.e. industry, mission statement, etc.)?  \n2. How does your company deliver its products (i.e. distribution such as SaaS, professional services, retail, etc.)?  \n3. What does your supply chain look like today (i.e. outsourced, 3rd party goods, etc.)?  \n4. What regulatory/compliance requirements do you have meet? (SOX, ISO, NERC, etc.)?  \n5. How do your employees work today (i.e. 100% remote, in the office or a combination of both)?  \n6. What do your employees use to complete their work ( [i.e. mobile](i.e. mobile) devices, Macs/ PC, IoT devices, etc.)?  \n7. How do your employees communicate daily ( [i.e. email](i.e. email), IM, social media, snail mail or all the above)?  \n8. How would define your leadership structure (mechanistic or organic)?  \nNow, shift focus to your ‘threats’. Ask yourself the following:  \n1. What is the largest security challenge your company has faced in the last year (phishing attacks, ransomware, lost/stolen equipment, insider threat, wire fraud, etc.)?  \n2. Which department has the most public exposure?  \n3. Which department has led to the most security headaches?  \n4. Which medium has led to the largest number of incidents (email, USBs, social media, etc.)?  \nCombining information from your ‘opportunities’and ‘threats’ helps create a solid foundation foryour training program.  \nTake this example:  \nBob works in the","cbCaits1FajBuJUH","https://ap.wps.com/l/cbCaits1FajBuJUH","pdf",452608,9,"English","# The Value Proposition\n## Human error and breach risk\n## From compliance to commitment\n# The Approach\n## Five stages model\n### Analyze\n### Create\n### Implement\n### Evaluate\n### Repeat\n# Stage 1-Analyze\n## Company strengths and delivery model\n## Supply chain and compliance requirements\n## Employee environment and communication\n## Threat and opportunity mapping\n# Stage 2-Create\n## Converting SWOT into measurable goals","[{\"question\":\"Why does the document say security awareness training often fails to deliver results?\",\"answer\":\"It states that efforts to reduce human error are failing and that organizations spend heavily without seeing behavior change. It also argues that harsh reprimands without context do not address the underlying causes of risky actions.\"},{\"question\":\"What is the recommended approach to change employee security behavior?\",\"answer\":\"The document emphasizes capturing employees’ “hearts and minds” by reframing security from something they have to do (compliance) to something they want to do (commitment).\"},{\"question\":\"What are the five stages in the awareness training program?\",\"answer\":\"The five stages are Analyze, Create, Implement, Evaluate, and Repeat (repeat steps 1–4). Each stage supports building a measurable, ongoing program rather than a one-time deployment.\"}]","Awareness Training - Program Best Practice | PDF",1790136403]