Here’s why that cybersecurity training probably won’t work

Someone inadvertently clicks on a suspicious link, suddenly compromising your organization’s system. Worst-case scenario: Hackers demand ransom, as when an unnamed Fortune 500 company forked over an astonishing $75 million to the Dark Angels gang last year. To prevent that from happening, you immediately arrange training for employees. Not so fast: A study involving 19,500 UC San Diego Health employees found that cybersecurity training programs don’t prevent phishing scams. Why? Simply put, many employees don’t take them seriously. “These trainings, in their current form, are not effective,” paper co-author Ariana Mirian said. Instead, researchers suggest two measures for cyber survival: two-factor authentication, as well as password managers that work only on correct domains.