Organisations relying solely on security awareness training (SAT) have visibility into only 12% of risky behaviour.

July 22, 2025

Human risk SAT Security awareness training

Organisations relying solely on security awareness training (SAT) have visibility into only 12% of risky behaviour. — This cybersecurity statistic was published by Living Security in July 2025. It covers topics including Human risk, SAT, Security awareness training. The original data appears in 2025 State of Human Cyber Risk Report. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 7/22/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Organisations relying solely on security awareness training (SAT) have visibility into only 12% of risky behaviour. This data was published by Living Security and covers Human risk, SAT, Security awareness training.

Where does this data come from?

This statistic comes from 2025 State of Human Cyber Risk Report, published by Living Security on July 22, 2025. You can view the original report at https://www.livingsecurity.com/2025-human-risk-report-key-cybersecurity-insights.

What cybersecurity topics does this cover?

This statistic relates to Human risk, SAT, Security awareness training. Browse more statistics on Human risk or from Living Security.

CYBERSTATS

Organisations relying solely on security awareness training (SAT) have visibility into only 12% of risky behaviour.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

Just 10% of employees are responsible for 73% of cyber risk. This also means that a small fraction of employees (specifically 10%) are responsible for 73% of risky behaviour.

Mature HRM programmes have 5 times the visibility into risky behaviour compared to organisations relying solely on SAT.

Strategic Human Risk Management (HRM) programmes can reduce risk 60% faster than traditional methods.

33.98% of IT decision-makers at financial services firms reported that security awareness training is currently fully or partially managed by an MSP or MSSP.

Only 17% of executives at financial services firms indicated that security awareness training will be a priority in the coming year.

47% of UK IT leaders cited employee security awareness training as the most common defence against email-related incidents.

Browse by Topic

Stay Ahead of Cyber Threats