Why is security awareness training so rigid and hard to customize?
Most security training platforms force a rigid monthly schedule and rely on long, ten-minute videos that clients resist watching. Administrators also face a lack of flexibility in micro-training options and clunky management tools that make tracking and assigning courses a manual chore.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
- 1manually managing the cadence
- 2using alternative security awareness platforms like Hook Security that offer shorter training videos and automated campaign frequencies
- 3Switching to different training vendors like KnowBe4, Metacompliance, BullPhish ID, Ninjio, or Huntress managed SAT
- 4Recording videos for users who missed sessions to watch later
- 5Manually noting who attended mandatory training sessions
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“One thing I dislike a bit is the managed method doesn't allow you to select a cadence, it's monthly or you need to manually manage.”source ↗
“The other thing is the videos tend to get towards 10 minutes rather than a shorter video which is a harder sell in general.”source ↗
“the issue we find is a lack of flexibility managing their micro trainings.”source ↗
“We currently use the training built into proofpoint but oh my is it awful to manage (can't filter and assign by licenced users, can't easily extend or notify for users who haven't completed training) Basically it requires too much maintenance / input.”source ↗
Where this came up
People with this problem also raised
- 3How to streamline Intune security policies across multiple tenants
- 4Why does team documentation always go out of date?
- 2How to speed up or bypass mandatory compliance training videos
- 3How to train new employees on technical work without repeating yourself
- 6Why are security warning emails so vague?
- 5How do I get people to actually read project update emails?