Back

Security Awareness Training is Broken

October 16, 2025

Most breaches still start with human behavior. Yet enterprises continue to spend billions on traditional security awareness training that fails to reduce real risk.

In this discussion, Dune Security Co-Founders David DellaPelle (CEO) and Michael Waite (CTO) explain why legacy programs are broken and how a data-driven, behavior-based approach is helping security teams finally close the user risk gap.

Key Takeaways:

  • Why one-size-fits-all training no longer works
  • How AI and off-channel attacks changed the threat landscape
  • Why generic awareness programs fail to move the needle on user risk
  • How personalized, risk-based training drives measurable resilience

At Dune Security, we automatically prevent insider threats and social engineering by simulating multi-channel attacks, scoring user risk, and adapting training and controls in real time.

Gain true risk reduction. Save time. Improve your security culture.

👉 Book a demo to learn more: https://www.dune.security/book-a-demo

Watch NowWatch Now

Video Recap

Upcoming Events

Step into the atmosphere of our upcoming events.
View all

GPSEC® Tysons

Join Dune Security at GPSEC Tysons, a premier cybersecurity conference for enterprise security leaders and practitioners.

Start:
April 30, 2026
End:
8:00 AM - 6:00 PM

Exploring the Role of the CISO in Cybersecurity

Join Dune Security for a virtual webinar featuring CISOs from Scrut Automation, Wallarm, and Culligan exploring the evolving role of the CISO and how security leaders are navigating rising expectations, emerging threats, and enterprise leadership responsibilities.

Start:
April 29, 2026
End:
3:00 PM ET

Exploring GRC Engineering

Join Dune Security for a virtual webinar exploring the emerging role of GRC Engineering and how organizations are building more resilient, audit ready risk programs through automation and scalable design.

Start:
April 17, 2026
End:
3:30 PM ET

Interested in hosting an event with Dune Security?