Rethinking security awareness training as social engineering evolves

SecurityWeek examines whether security awareness training helps employees resist social engineering. Experts it interviewed say generic annual courses can become compliance checkboxes and struggle to keep pace with evolving attacks. Several recommend more frequent, role-specific training focused on what employees do when they encounter suspicious messages, alongside identity protections, verification procedures and other technical controls.