(ISC)2 Official@Work vs. SANS Security Awareness Training

SANS Security Awareness Training program would be well suited for a large organization that needs to develop multiple training programs with different courses based on the roles of the end users. It seemed a bit difficult at times to achieve simple setup processes because of the configurations tailored to larger, more complex organizations.

Incentivized

• Variety of cyber threat videos and presentations
• Web based and mobile access to the platform
• Easy to manage administrator access to configure the training sessions

Incentivized

• Mass import of users was a bit confusing
• User interface was sometimes not intuitive
• Ability to upload custom content was difficult to use

Incentivized

We actually are currently migrating to Proofpoint Security Awareness Training because of its integration with the Proofpoint email filter. This will allow us to target specific users who are clicking on bad emails with specific training material. We have used KnowBe4 in the past as well, but it was rather costly compared to SANS Security Awareness Training and Proofpoint. SANS Security Awareness Training seems to be the least easy-to-use interface from an administrative perspective compared to the other two.

Incentivized

• Positive impact knowing we are educating our staff from phishing and potential cyber criminals
• Considering the potential for bad actors infiltrating our network, this is a small expense
• Pricing based on actual end users, worth the investment

Incentivized