Report by Abnormal AI
2025 State of Security Awareness Training
Key Findings
While 99% of organizations experienced incidents tied to human error, the vast majority stated they struggle to implement effective, scalable SAT programs.
99% of organizations see value in using AI to support automatically generating training campaigns and workflows.
More than half (53%) of respondents agreed that the effort required to run their current SAT tools outweighs their impact.
Nearly all of the organizations surveyed (99%) are in favour of including AI in future SAT tools and workflows.
83% of respondents agreed that their current SAT tools require substantial effort to operate and maintain.
95% of organizations see value in using AI to Automatically create individualized attack simulations based on individual user profiles.
95% of organizations see value in using AI to Automate the creation of training videos.
99% of organizations experienced security incidents linked to avoidable human error.
Many SAT programmes exist primarily to satisfy regulatory or insurance requirements.
95% of organizations see value in using AI to Conduct conversational coaching by leveraging LLMs.
96% of organizations see value in using AI to Create dynamic risk scores based on past user behaviour and the types of attacks targeting certain types of users.
75% of organizations require employees to complete security awareness training at least quarterly.