A remarkable security awareness training program doesn’t happen overnight. frequently falling short in organizations’ priorities and understanding where they stand. After interacting and collecting data from thousands of organizations, we created a model to help address the elephant in the room. No one is perfect and almost everyone responsible for security awareness is doing it as a side hustle in their role. Curricula’s Simple Security Awareness Maturity Model is a tool for organizations to recognize patterns of where they stand and why they fall into that stage. The model is made ..read more

It’s no secret that the cyber security industry loves acronyms. Today, I’ve got the pleasure of breaking down arguably one of the cyber industry’s most infamous acronyms: Fear, Uncertainty, and Doubt, also known as FUD! Specifically, we’re going to talk about how FUD has been heavily relied on for years when educating people about cybersecurity and why now it’s time for that to change for good. If you want your organization to have a successful security awareness trainingprogram, FUD is not the answer. We’re going to talk about what strategies you can use to empower yo ..read more

Cyber security can be overwhelming and for organizations just starting out the question is — where do you actually begin? What are the first steps that a small organization can take to build a cyber security program? Curricula’s founder and CEO Nick Santora (CISA, CISSP) sat down with the co-founder and CTO of Blumira, Matt Warner to discuss what it means to start from ‘square one’ in your security program. Blumira is a threat detection and response platform that has specialized technology to help organizations prevent ransomware attacks and data breaches. The benefit of securit ..read more

The topic of diversity is one that should be talked about amongst every organization, for us, the cybersecurity industry is one that needs work and specifically how to go about it in security awareness training. The discussion of diversity is not a comfortable one. However, in light of the many movements such as Black Lives Matter, #MeToo, Stop AAPI Hate, Equal Pay, and many more, the cyber industry can’t ignore the glaringly obvious need for more diversity, equity, and inclusion (DEI). Since the founding of Curricula, diversity has been baked into our training content and people. We want ..read more

As Curricula approaches its 6th anniversary, I wanted to share our latest product release that has everyone excited: the Curricula Learning Management System and Custom eLearning Authoring Software. Curricula now allows anyone to create fun custom online training stories, right inside our platform. Building your own quizzes, uploading videos, and using our story-based content library is now just a few clicks away. Let me share more on why we released this awesome product update. The Organizational Online Training Dilemma  2020 was a year that has changed our lives in m ..read more

Recently, a Sequoia employee was the victim of a successful phishing attempt. This is just the beginning and continues to prove that anyone is vulnerable to an attack. Hackers are targeting the venture capital industry as a nice gateway into the funds, investors, and portfolio companies that they are connected with. I’m going to talk about why VCs are becoming a target for phishing attacks and what we can do together to help prevent future cyber incidents just like this one.  Why do VCs need security awareness training? Almost every business has now recognized that their employees ne ..read more

Sharing and reusing passwords is one of the easiest ways hackers can gain access to your online accounts. A recent data breach at a water treatment plant in Florida — where a hacker attempted to poison the water supply — was due to the fact the facility’s computers shared the same password for remote access. Throughout my career in cyber security, I’ve heard some pretty wild stories about places people keep their passwords. So I asked the online community on LinkedIn and Spiceworks to share their wildest answers for the best place to store a password. The response we received was overwhelmin ..read more

To help raise awareness about the importance of safeguarding data, Curricula has partnered with Cyvatar for a webinar on Jan. 28, 2021, broadcasting live at 1 p.m. EST. Click here to register now. Data Privacy Day is a global effort taking place annually on January 28th that generates awareness about the importance of privacy. This year, we’ve teamed up with the National Cybersecurity Alliance and Cyvatar to help encourage businesses to “Respect Privacy” advocating for holding organizations responsible for keeping individuals’ personal information safe from unauthorized access and ensuring fai ..read more

Unless you’ve been living under a rock, everyone knows what phishing is and most likely has received or even fallen for a phishing email themselves. So at this point, there should be no excuse, right? Wrong. While it’s apparent we all know what we’re up against, the facts still show that we continue to fall victim to these attacks. Therefore, the only way you’ll be able to build up your defenses and mitigate against phishing attacks is through practice. That’s where phishing training comes in handy for you and your employees. Starting your phishing simulation training program as a part of you ..read more

A little over seven years ago we started something special. A little dream that I had back in March 2015 to create cybersecurity education that’s fun for everyone. And today, I’m announcing a new chapter in our story: Curricula has been acquired by Huntress for $22M. Before I get into the weeds on what’s next, how the industry is going to change, etc., I wanted to share more context about how one of the greatest cybersecurity stories of our time came to be.  Back in November of 2021, we launched a new Curricula Free plan, designed as a free security awareness plan to help SMBs with up to ..read more