White Paper
2025 State of Security Awareness Training
The 2025 State of Security Awareness Training report shows most cyberattacks exploit human error, with phishing driving 77% of advanced threats. Nearly all firms (99%) suffered incidents from avoidable user actions, yet current training often fails—83% say programs take too much effort, and 49% see little impact. Phishing simulations dominate, but effective methods like just-in-time training and gamification are underused. AI emerges as a game-changer: 100% of leaders in mature programs back its use for tailoring content, risk scoring, and adaptive coaching. Abnormal’s AI Phishing Coach delivers hyper-personalized, real-time lessons, shifting SAT from compliance to cultural transformation.