News and Analysis

Employees across many industries have become familiar with some sort of annual cybersecurity training at their organizations, from watching informational videos to participating in simulated phishing attempts. 
For heavily regulated sectors such as finance or healthcare, these trainings may tick a box for compliance purposes. However, actually making the organization more secure is a different concern. 
“Now there’s a realization that, at a user level, security and compliance are not the same thing,” says Ryan Witt, vice president of industry solutions at Proofpoint. “In the actual…