Security Awareness & Training Resource Center
Featured content

Deconstructing Human-Element Breaches | Infosec HRM
Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way.

Inside an Infosec Boot Camp: All your questions, answered!
You need to get certified, but is an Infosec Boot Camp the right choice for you — or your team? Find out in this live Q&A with two Infosec instructors.

Emerging trend checklist: Which certifications cover which new skills?
Boost your team's cybersecurity skills with the right certifications. Discover the most in-demand skills and the certifications that cover them in our free guide.

Security Awareness Outcomes with Infosec IQ
See security awareness and training outcomes from more than five million Infosec IQ learners.
Our resources

CISA certification: Overview and career path
If you want to be an IT auditor, or are one now and don’t have a certification, then why not consider the Certified Information Systems Auditor (CISA) creden
Navigating Security+ performance-based questions
Excel in the Security+ exam with key strategies for performance-based questions. Discover types and examples of PBQs to expect in 2024.
This combat medic turned cyber pro says “diversity is required”
Scholarship winner Oriana Lau is on a mission to prove the value of a female perspective in cybersecurity — and pave the way for fellow veterans and girls.
Your definitive guide to the CompTIA Project+ Certification
Is the CompTIA Project+ certification for you? If so, read on to learn everything there is to know about Project+ and how it can uplevel your career prospects now.
Considerations when using open source to build an identity system
Identity systems are often complex. Can open source software help to take the load off developers to build an interoperable, secure, and usable digital identity?
How to Safeguard Against the Privacy Implications of Cloud Computing
Introduction The definition of cloud computing is quite controversial but the general consensus, good enough for our purposes, is that it is really just a me

The Ultimate Guide to Threat Hunting
Introduction At its essence, cyberthreat hunting can be quite similar to real-world hunting. It requires a uniquely skilled professional possessed of consid
CySA+: IA levels and DoD 8570 [updated 2024]
CompTIA’s CySA+ is approved DoD as a baseline DoD certification. Learn how it can help meet 8570/8140 requirements.
Using Zeek for network analysis and detections
Learn about how to use Zeek, a free, powerful open-source network traffic analyzer.
What is intrusion detection?
Gain fundamental knowledge of intrusion detection and learn why it's crucial for network and endpoint security.
Learn the 3 pillars of cyber security risk management and leadership
Cyber security leaders and those in cyber security risk management need to follow three pillars to successfully add value to an organization.
Top five cybersecurity architect certifications
What is the role of a cybersecurity architect in information security? A cybersecurity architect is a key player in protecting a company’s networks, data an
Security engineer career path: A complete overview
Certified in Risk & Information Systems Control (CRISC) Exam Overview [updated 2022]
Find out all the ins and outs of the CRISC examination so you can be better prepared to succeed.
Software dependencies: The silent killer behind the world's biggest attacks
Why software dependencies represent a risk to virtually all software projects.
Customer data protection: A comprehensive cybersecurity guide for companies
Looking for advanced cybersecurity strategies? Here is a comprehensive guide on how to develop a cybersecurity plan for enhanced data security.
CompTIA PenTest+ exam details and process
PenTest+ is a certification that verifies top-flight penetration testing knowledge and skills.
PenTest+ vs. CEH: Which certification is better? [2022 update]
Find out why the CompTIA PenTest+ or EC-Council's CEH is the certificate for you.
Average SCADA Security (CSSA) salary
What is SCADA? Supervisory Control and Data Acquisition is one of the most interesting areas of Industrial Control Systems (ICS) and refers to the hardware a
5 tactics to improve cybersecurity hiring results
Cybersecurity hiring can be difficult. Here are five tips you can implement now to help improve your odds of finding great candidates.
CompTIA’s A+ exam: 220-1102
The CompTIA A+ credential offers several paths to fulfilling positions, including computer user support specialist, help desk technician or field service tec
CompTIA’s A+ exam: 220-1101
Get an overview of CompTIA’s A+ exam content and how to prepare.
Top 30 Microsoft Certified Systems Engineer (MCSE) interview questions and answers
Note: The MCSE certification was retired on January 31, 2021. Browse current IT and security certifications. Your Microsoft Certified Solutions Expert cer

How to Align Training With the NIST NICE Framework
The talent gap in the cybersecurity workforce has been widening every year. In 2018, ISC2 estimated the shortage at 2.93 million cybersecurity professional