Security Awareness Training – Social Engineering
March 18, 2025
Join us for an essential Security Awareness Training session focused on Social Engineering. In this session, we delve into the critical importance of cybersecurity awareness and how you, as an individual, serve as the first line of defense against cyber threats.
Key Topics Covered:
- The Cost of a Data Breach: Understand the financial and reputational impact of data breaches, with the global average cost reaching $4.88 million USD in 2024.
- Real-World Example: Learn from the Change Healthcare Breach of 2024, the largest in U.S. history, affecting 100 million people, and discover how compromised credentials and lack of multi-factor authentication (MFA) led to a $2.87 million loss.
- Social Engineering Tactics: Explore how attackers exploit human tendencies like trust, fear, and curiosity through phishing, smishing, and vishing attacks. Did you know that 98% of cyberattacks use social engineering tactics?
- Red Flags to Watch For: Learn how to spot phishing emails, smishing texts, and vishing calls by identifying common red flags such as generic greetings, urgent tones, unexpected links, and requests for sensitive information.
- What to Do if You’re Targeted: Gain practical steps to take if you encounter a phishing email, smishing text, or vishing call, including how to report suspicious messages and protect your information.
- What to Do if You’ve Been Scammed: If you fall victim to a scam, don’t panic! We provide clear guidance on how to respond, including disconnecting your devices, contacting technical support, and reporting the incident to authorities like the FBI and CISA.
- Cybersecurity is not just an IT issue—it’s everyone’s responsibility. Whether you’re an employee, business owner, parent, or senior, this training is designed to equip you with the knowledge to reduce cybersecurity risks and protect yourself and your organization.
Why This Matters:
Remember: Technology alone cannot protect you. Training is a must to stay ahead of evolving threats. Watch this session to strengthen your cybersecurity awareness and become a more informed and vigilant defender against social engineering attacks.
Stay safe, stay aware, and remember—YOU are the first line of defense!
You May Like These Posts
The Audit Trap: Why Passing isn’t Protection
Think passing an audit means your cybersecurity program is solid? Think again. Many organizations unknowingly expose themselves to greater risk by relying on compliance checkmarks rather than a true security strategy. In this session, we’ll uncover the hidden dangers of audit-driven security, why "passing" may leave you more vulnerable, and the real steps leaders must […]
The Maturity Gap: Why GRC Programs Plateau (and How to Advance)
Most GRC programs reach a point where they stop growing—mature enough to pass audits, but not resilient enough to lead. In this session, we’ll reveal the key traits of high-maturity programs and what it takes to get there. You’ll learn how to identify your plateau, remove roadblocks, and strategically advance your organization’s governance, risk, and […]
Security Awareness Training – Verizon 2025 Data Breach Investigations Report
In this 15-minute training, the HG team breaks down the most critical findings from Verizon’s 2025 Data Breach Investigations Report (DBIR)—and what they mean for real-world security programs. We cover the sharp rise in third-party breaches, the growing threat of GenAI misuse, and the continued dominance of ransomware and credential-based attacks. You’ll walk away with […]
What Operationalized GRC Actually Looks Like: From Silos to Systems
Many organizations believe their GRC program is operational because audits are passing and tools are in place. In reality, operationalized GRC behaves very differently. Risk has clear ownership. Information flows across teams. Gaps surface early instead of being hidden. In this session, Cheri Hotman and Peter Spier walk through what an operationalized GRC program actually […]
Security Awareness Training – Social Engineering
Join us for an essential Security Awareness Training session focused on Social Engineering. In this session, we delve into the critical importance of cybersecurity awareness and how you, as an individual, serve as the first line of defense against cyber threats. Key Topics Covered: Why This Matters: Remember: Technology alone cannot protect you. […]
Vulnerability Scans: Only Part of the Equation
There are two primary ways we see companies manage vulnerabilities… one of them significantly riskier than the other. Reactive strategies rely on a problem to arise before taking action. This makes reactive the riskier option of the two, hopefully for obvious reasons. Using a reactive strategy is like waiting for an electric bill to […]
Stop Asking If AI Is Trustworthy. Start Asking If Your System Is Governable
Organizations are under pressure to adopt AI quickly, but many are still trying to govern AI-enabled systems with approaches suited for more predictable environments: policies, approvals, framework mappings, testing, and after-the-fact monitoring. Those mechanisms still matter, but they are not enough when systems retrieve changing context, invoke tools, operate through delegated authority, and create consequences […]
A Practical Approach to Choosing the Right GRC Tool
With countless GRC tools on the market, how do you know which one is the right fit for your organization? The wrong choice can lead to wasted resources and unmet security goals. In this session, we’ll walk through real-world cases, breaking down why specific tools were chosen and how they were successfully implemented. You’ll learn […]
Securing AI: Balancing Innovation, Risk, and Reality
AI adoption is exploding—but so are the risks. From data exposure and prompt injection to unregulated model training, most organizations are using AI without fully grasping where their data lives or how it’s being secured. In this session, we’ll unpack the real meaning of “securing AI,” exploring how risk, governance, and innovation must coexist. You’ll […]
Post A Comment
Endless audits and customer demands were never supposed to replace real security.
We build, implement, and run Cyber GRC programs that reduce risk, protect the business, and still pass audits.
Hotman Group is a certified
woman-owned business (WOSB)
Hotman Group, LLC
Fort Worth, TX
Privacy Policy | Terms of Service | All Rights Reserved © Hotman Group, LLC