Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

SANS 2026 Security Awareness & Culture Report

Login to download
SANS 2026 Security Awareness & Culture Report (PDF, 11.79MB)Published: 27 Aug, 2026
Created by:
Lance Spitzner
Lance Spitzner

Embedding a Strong Security Culture

The SANS Security Awareness & Culture Report is the field's only annual benchmark built by practitioners, for practitioners. Now in its 11th year, the report maps where programs stand, what risks are rising, and what the data says about how to respond — giving security awareness professionals the benchmarks, maturity roadmap, and career intelligence to move their programs and their roles forward.

Meet Your Author

Lance Spitzner
Lance Spitzner

Lance Spitzner

Fellow

Lance revolutionized cyber defense by founding the Honeynet Project. At SANS, he has empowered over 350 organizations worldwide to build resilient security cultures, transforming human risk management into a cornerstone of modern cybersecurity.

Read more about Lance Spitzner

Additional Resources

Evaluating LLMs as a Bridge Between Cyber Threats and Business Risk for Executive Decision-Making

WhitepaperArtificial Intelligence, Cyber Defense
  • 11 Aug 2026
  • Arcadio Aguilar

Entra ID Governance: Insta-IAM/IGA Solution?

WhitepaperCyber Defense
  • 6 Aug 2026
  • Scott Fortin

Reconstructing Deleted File Activity Using FSEvents from macOS

WhitepaperDigital Forensics and Incident Response
  • 30 Jul 2026
  • Josh Clevenger

Practical MFA for the Enterprise: Enforcing Strong Authentication for Non-Human Identities Using Compensating Controls

WhitepaperCyber Defense
  • 9 Jul 2026
  • Fredrick Stock

Capturing the Click: Process-Based Detection of Malicious Link Interactions

WhitepaperDigital Forensics and Incident Response
  • 22 Jun 2026
  • Daniel Gott

Detection Strategies for AskCreds Beacon Object File Credential Harvesting Across Multiple C2 Frameworks

WhitepaperDigital Forensics and Incident Response
  • 22 Jun 2026
  • Eric Fletcher

Related Courses

LDR539: Enterprise Risk Management for CISOs

BETA
Advanced
LDR539Cybersecurity Leadership
LDR539
  • 3 Days (Instructor-Led)
  • 18 CPEs / 18 Hours
  • Labs: 13 Hands-On Labs

  • 3 Days (Instructor-Led)
  • 18 CPEs / 18 Hours
  • Labs: 13 Hands-On Labs
View course detailsRegister