- Cyber Safety
- Posts
- Your Cybersecurity Training Might Be Teaching the Wrong Lessons
Your Cybersecurity Training Might Be Teaching the Wrong Lessons
Sponsored by
A CRM so smart, it updates itself.
HubSpot's CRM is so smart, it now updates itself. Calls get logged and summarized the moment they end. New leads get researched and a first outreach drafted, automatically. Deals move forward on their own, with next steps flagged before you have to ask.
Even the one repetitive task you've been meaning to fix can now run itself, no code required. Customers using it are already seeing the difference.
This isn't the CRM you have to work hard to figure out. It's the one already working before you log in.
Annual Training Isn't Enough Anymore
Many organizations rely on mandatory cybersecurity courses completed once a year. But cyber threats evolve continuously, and employees can forget security guidance long before the next training session.
Awareness Doesn't Always Change Behavior
Employees may understand that phishing is dangerous while still clicking suspicious links under pressure. Knowing the correct answer in a training module is different from making the right decision during a busy workday.
Generic Training Misses Real-World Risks
Finance teams face payment fraud, developers handle credentials and source code, executives face impersonation, and support teams manage account recovery. Security education should reflect the actual threats employees encounter.
You are sitting on $100k to $2 million of data
OpenAI, Micro1 and Anthropic have paid out billions of dollars to partner with companies on their operational data. It's creating a new revenue stream for businesses over 20 people and pays anywhere from $100k - $2 million a pop.
Fear-Based Training Can Backfire
When employees worry about punishment for making mistakes, they may hesitate to report suspicious activity. A culture of blame can turn a small incident into a much larger problem.
Reporting Behavior Is a Better Signal
Instead of focusing exclusively on phishing click rates or course completion, organizations should also measure how quickly employees report suspicious messages and whether they know how to escalate concerns.
Build Security Habits, Not Just Security Knowledge
Deliver short, role-specific training, run realistic simulations, reinforce good decisions, and make incident reporting simple and judgment-free. The strongest security awareness programs don't just teach employees what threats look like — they help people respond correctly when those threats appear.
Analytics on Live Data Without Leaving Postgres
When analytics on Postgres slows down, most teams add a second database. Then they manage pipelines, sync lag, and drift forever. TimescaleDB extends Postgres instead. Analytics run on live data, in the database you already have. No pipeline. No migration. No new query language.