Optimizing Training to Effectively Mitigate the Human Risk of Cyberattacks: A Critically Appraised Topic

Employees are an organization's greatest defense against cyberattacks; however, traditional cybersecurity training falls short of developing this protection. Failing to properly train employees to prevent a cyberattack becomes a vulnerability that attackers exploit. Can organizations optimize employee cybersecurity training to effectively mitigate the human-related risks of cyberattacks? Findings indicate that optimized cybersecurity training can indeed mitigate this risk. In this topic paper, the author reviewed the research to recommend strategies for optimizing such training, highlighting the importance of embracing cybersecurity company-wide, at all levels. Furthermore, the lessons in the training must be reiterated, updated, and reinforced—thus promoting a culture of cybersecurity awareness—for the training to have ongoing value.