In response to the escalation of the COVID-19 outbreak, we've made the decision to convert live training events into virtual at this time.

The courses below will take place online, using virtual software to stream live instructors to all registered students during the scheduled classroom hours. This alternate training format will allow us to deliver the cybersecurity training you expect while keeping you, our staff, and our instructors as safe as possible.

WEBCAST | Driving Cybersecurity Change – Establishing a Culture of Protect, Detect and Respond Highlights

Tuesday, April 7th, 2020 at 10:30 AM EDT (14:30:00 UTC)

Cybersecurity is no longer just about technology it is ultimately about organizational change. Change in not only how people think about security but what they prioritize and how they act, from the Board of Directors on down. Organizational change is a field of management study that enables organizations to analyze, plan, and then improve their operations and structures by focusing on people and culture. This presentation is a highlights version of our SANS MGT521 course that will teach leaders how to leverage the principles of organizational change, enabling them to develop, maintain and measure a security-driven culture.


London, UK | MGT433: How to Build, Maintain and Measure a Mature Awareness Program

Mon, May 18 - Tues, May 19, 2020 - SANS CyberCast

The course covered how to create a comprehensive program and gave me many more ideas and inspiration (really!) to hit the ground running. Learned from hearing fellow students' feedback. Also felt good about what I've done thus far!

Yvonne Bashor, Oregon Legislature

I'm running a global program as a team of one. The networking is invaluable.

Janet Roberts, American Express Co.


London, UK | MGT521: Driving Cybersecurity Change - Establishing a Culture of Protect, Detect and Respond

Wed, May 20 - Thu, May 21, 2020 - SANS CyberCast

After completing this course you will be able to:

  • Explain what culture is, how it applies to cybersecurity, and how to understand and measure your security culture.
  • Explain what organizational change is, identify different models for creating change and learn how to apply those models.
  • Align this change to your organization's strategy, including how to leverage different security frameworks and maturity models.
  • More effectively communicate to your Board Directors and executives, collaborate with your peers, and engage your workforce.
  • Enable and secure your workforce by integrating security into all aspects of your organizational culture.
  • Dramatically improve both the time and impact of large-scale security initiatives.
  • Leverage numerous templates and resources from the course Digital Download Package and Community Forum that you can then build on.

Washington, DC | MGT433: How to Build, Maintain and Measure a Mature Awareness Program

Sat, June 13 - Sun, June 14, 2020 - SANS CyberCast

Having been actively involved in information security for more than 20 years, I have seen one constant factor: people are the number one target for cyber attackers because we fail to properly invest in and secure them. Once trained, your workforce will become your greatest asset, not only in preventing incidents but being able to quickly identify and report them, developing a far more resilient organization. I am extremely excited about MGT433, as we provide organizations with the skills, resources and community they need to build a high-impact security awareness program that will not only change behaviors, but also measure that change.

- Lance Spitzner


Austin, TX | SANS Security Awareness Summit & Training 2020

Summit: August 5-6 | Training: August 3-4; August 7-12

The 7th annual SANS Security Awareness Summit is on and we're getting ready for our biggest and best Summit yet! Every year, we strive to provide the very best forum for security awareness officers looking to take their program to the next level! Our promise is to provide actionable lessons you can take back and apply right away within your own organization, with a focus on your industry, employee base, and current maturity level. This two-day Summit includes expert awareness-focused talks, interactive discussions, networking events, and more!


Go beyond compliance. Build, grow and measure your security awareness program easily with SANS Security Awareness Training. Increase engagement and maximize effectiveness.

OnDemand MGT433: How to Build, Maintain, and Measure a Mature Awareness Program

This OnDemand training gives you anytime, anywhere access to our world leading information security training. Learn the most effective way to secure the human element by establishing a mature security awareness program that goes beyond just compliance, changes peoples' behaviors and ultimately creates a secure culture. Taught by Lance Spitzner, this intense OnDemand course will teach you the key concepts and skills needed to do just that, and is designed for those establishing a new program or wanting to improve an existing one.