1、Mature Your Program&Grow Your CareerKey Findings from the 10th Annual SANS Security Awareness ReportLance Spitzner&Rachael SafferSANS Security Awareness Summit 2025What This Session Will CoverWhy the SANS Security Awareness Report mattersWhats new in this years(10th!)reportKey data points you can ac
2、t on todayAction items to mature your programCareer insights and compensation dataThe Report at a Glance 2,700+practitioners across 70+countries Largest data set in the reports history Built by the community,for the community Designed to drive both organizationaland career growthLive Insights!With C
3、had Jones Have a specific data question?Use the Summit Slack for custom insights Ask Chad in Slack(or in person at the Workforce booth)to get your own personalized analysis#security-awareness-reportWhats New in 2025?Open-ended responses from the community Deeper focus on career development Updated M
4、aturity Model and indicators Live data access via Chad Jones(Slack and booth)Maturity=Time+Team Size 2.8 FTEs/3-5 years=Organization wide Behavior Change 3.9 FTEs/5-10 years=Organization wide Culture Change 6+FTEs/10+years=Optimization&ResilienceBenchmarking Your Program Most programs are in Behavio
5、r Change Small increase in Optimization this year Decline in Non-Existent programs=progressYour Top Risks in 2025 Social Engineering Mishandling of sensitive data Authentication gaps Misuse of AI and generative toolsBiggest Challenges to Success?ACTION ITEMS1.Stop talking about what you do,start tal
6、king about why you do it Human Risk/Security Culture2.Leverage AI to amplify your impact3.Develop partnerships4.Demonstrate gap between technical and human investmentsLets Talk CompensationGlobal average:$116,091North America:$129,961Europe:$93,661Highest-paid