Cybersecurity Awareness Month 2025 will focus on several key behaviors:

• ‍SB003: Authenticates with a strong password (or passphrase)
• ‍SB209: Uses an approved or official password manager application
• ‍SB001: Authenticates with MFA
• ‍SB081: Checks a message for signs of deception‍
• SB013: Reports a security incident
• ‍SB024: Keeps software up-to-date

‍

People aren’t born with these behaviors installed in their brains. They need help understanding how—and why—to adopt these behaviors.We’ve put together this toolkit to help you, help them.

‍

‍

TAXONOMY

Security Awareness Engagement Taxonomy

Our audacious scientific pioneers, supported by the SebDB Community, have researched and categorized 30+ approaches to boost security awareness engagement.

Organized by cost, tactic type, and effort, this framework helps prioritize where to deploy your (often limited) resources.

‍

‍

‍

‍

‍

STORY STYLE BLOGS

Security awareness blogs

Exclusive to the toolkit, access to EIGHT story-style blogs:

• ‍Are you really a target? Guides people through how to assess their risk and take steps to protect themselves.‍
• Security incidents: Your role helps people understand their role in responding to security incidents.‍
• Passphrases helps people to use and remember strong, unique passphrases.‍
• Working remotely looks at safe practices for working outside of the workplace.‍
• Spotting fake emails will transform people into laser-eyed fake-email-spotting pros.‍
• Sophisticated attacks shows people how to identify and defend against the latest, social engineering attacks.‍
• Protecting your devices helps people keep their devices safe from malware and other threats.‍
• Preventing identity theft explores how people can protect their personal information.

‍

‍

RESEARCH

Who cares about cybersecurity awareness month?

We asked 1,000 US and UK professionals, to understand what they think of, and how they engage with, Cybersecurity Awareness Month. Some interesting trends emerged…

Get the complete dataset for detailed insight into:

• The types of activities and topics do workers find most/least useful
• The cybersecurity behaviors people are most eager to improve
• What motivates employees to get more involved in Cybersecurity Awareness Month

‍

‍

‍

‍

LONG READ

50 Cybersecurity Awareness Month ideas for 2025

This comprehensive planning guide shows how behavioral science can be adopted into CAM campaigns to:

• Supercharge awareness efforts
• Maximize impact
• Create lasting change in people’s habits

‍

We also share tips from innovative organizations and industry veterans who made a splash—and had fun—with their CAM campaigns.

‍

‍

WEBINAR

30+ proven ways to increase security awareness engagement

Human-related security incidents continue to plague organizations of all kinds.

But ask yourself, how many tactics are you using to drive engagement? If you can count them on one hand, it’s time to put aside an hour to listen to this.

In this on-demand webinar, we asked leading industry voices from Meta, New York Life and Raytheon Technologies to help us identify how to create a culture of security awareness in your organization.

‍

Get the Security Awareness Engagement Toolkit.

‍