[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-50":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-50","SP 800-50","SP 800-50 Rev. 1: Building a Cybersecurity and Privacy Learning Program",73,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on designing, implementing and maintaining a cybersecurity and privacy learning programme. The revision replaced the earlier guide on awareness and training programmes and covers awareness, role-based training and the full programme life cycle, from needs assessment to evaluation.\n\n**In practice.** Organisations analyse who needs what knowledge, deliver general awareness to all staff and deeper role-based training to groups such as administrators, developers and executives, and refresh content as threats change. Effectiveness is measured beyond completion rates, for example through behaviour and incident trends. Evidence includes a programme plan, training records, content review dates and evaluation results.\n\n**Common gaps.** Typical gaps are one annual generic course for everyone, no role-based training for high-risk roles, and measuring only attendance.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-powered-crypto-impersonation-scams-surge-1400-in-2025","AI-Powered Crypto Impersonation Scams Surge 1,400% in 2025","2026-10-13T22:20:45.127+00:00",{"slug":23,"title":24,"published_at":25},"fake-sextortion-protection-firms-defraud-vulnerable-victims","Fake Sextortion Protection Firms Defraud Vulnerable Victims","2026-10-13T20:20:46.443+00:00",{"slug":27,"title":28,"published_at":29},"international-operation-dismantles-west-african-scam-networks","International Operation Dismantles West African Scam Networks","2026-10-13T18:21:28.9+00:00",{"slug":31,"title":32,"published_at":33},"ai-honeypots-turn-the-tables-on-scammers-by-wasting-their-time-and-harvesting-intel","AI Honeypots Turn the Tables on Scammers by Wasting Their Time and Harvesting Intel","2026-10-10T14:20:33.99+00:00",{"slug":35,"title":36,"published_at":37},"764-network-leader-pleads-guilty-to-child-exploitation-conspiracy","764 Network Leader Pleads Guilty to Child Exploitation Conspiracy","2026-10-08T22:20:36.22+00:00",{"slug":39,"title":40,"published_at":41},"ai-powered-social-engineering-defeats-traditional-security-training","AI-Powered Social Engineering Defeats Traditional Security Training","2026-10-06T10:21:05.41+00:00",{"slug":43,"title":44,"published_at":45},"chinese-threat-group-impersonates-us-officials-to-target-ai-policy-experts","Chinese Threat Group Impersonates US Officials to Target AI Policy Experts","2026-10-05T18:21:07.128+00:00",{"slug":47,"title":48,"published_at":49},"pig-butchering-scam-nets-16m-by-exploiting-trust-on-social-dating-platforms","Pig Butchering Scam Nets $16M by Exploiting Trust on Social & Dating Platforms","2026-09-29T12:20:35.741+00:00",{"slug":51,"title":52,"published_at":53},"fake-security-alerts-via-google-ads-target-hundreds-of-organizations","Fake Security Alerts via Google Ads Target Hundreds of Organizations","2026-09-28T20:22:33.802+00:00",{"slug":55,"title":56,"published_at":57},"rust-developers-targeted-by-north-korea-linked-social-engineering-via-fake-video-job-interviews","Rust Developers Targeted by North Korea-Linked Social Engineering via Fake Video Job Interviews","2026-09-21T12:20:23.988+00:00",{"slug":59,"title":60,"published_at":61},"scattered-spider-member-pleads-guilty-social-engineering-leads-to-176m-in-fraud","Scattered Spider Member Pleads Guilty: Social Engineering Leads to $17.6M in Fraud","2026-09-18T22:20:22.702+00:00",{"slug":63,"title":64,"published_at":65},"black-axe-cybercrime-leaders-extradited-for-decade-long-fraud-campaign","Black Axe Cybercrime Leaders Extradited for Decade-Long Fraud Campaign","2026-09-15T10:20:35.623+00:00",[67,72,77,82,87,91],{"slug":68,"name":69,"problem":70,"stories":71},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",51,{"slug":73,"name":74,"problem":75,"stories":76},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",31,{"slug":78,"name":79,"problem":80,"stories":81},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",22,{"slug":83,"name":84,"problem":85,"stories":86},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",13,{"slug":88,"name":89,"problem":90,"stories":86},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":92,"name":93,"problem":94,"stories":95},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",9,[97,103,109,114,120,126,130,135],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","14","Control 14","Security Awareness and Skills Training",72,{"family":104,"item":105,"code":106,"title":107,"together":108},"gdpr","32","Article 32","Security of processing",39,{"family":110,"item":111,"code":112,"title":112,"together":113},"itil","overview","ITIL",34,{"family":115,"item":116,"code":117,"title":118,"together":119},"nist-800-53","at-2","AT-2","Literacy Training and Awareness",20,{"family":121,"item":122,"code":123,"title":124,"together":125},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",19,{"family":121,"item":127,"code":128,"title":129,"together":125},"pr-at","PR.AT-1","Awareness and Training",{"family":98,"item":131,"code":132,"title":133,"together":134},"17","Control 17","Incident Response Management",18,{"family":5,"item":136,"code":137,"title":138,"together":139},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",17]