Your Security Awareness Program Has Plateaued - What Happens Next?

About this episode

The episode discusses the plateauing of security awareness programs and strategies to reignite engagement and behavior change.

Episode #12 Many security awareness programs eventually hit a plateau. Training completion rates look healthy. Phishing numbers aren’t terrible. But progress stalls. Engagement drops. And leadership starts asking a difficult question: are we actually changing behavior? In this episode, Eliot is joined by Anthony Davis , a security awareness leader with more than a decade of experience building and running programs across major UK retailers. Together they unpack why awareness programs plateau and what practitioners can do to restart momentum. They explore the warning signs that a program has gone stale, why compliance-driven training often fails to change behavior, and how awareness teams can move beyond annual training toward continuous engagement and real behavioral metrics. If your awareness program feels stuck - or your metrics haven’t moved in months - this episode offers a practical playbook for getting things moving again. What you’ll learn in this episode: How to recognize when your security awareness program has plateaued Why high training completion rates don’t necessarily mean behavior change The biggest design flaws that cause awareness programs to stall Why phishing…

People in this episode

Host: Eliot Baker

Guest: Anthony Davis

Topics covered

• security awareness
• behavior change
• training programs
• engagement

Keywords

• program plateau
• training completion
• phishing metrics
• continuous engagement

Mentioned in this episode

Places: UK

More episodes of All Things Human Risk Management

• The Ethical Guide to Security Storytelling: Navigating Real Breaches with Care and Respect · February 2, 2026 · 34 min
• The Attacks Getting Through Your Filters (and How AI Is Scaling Social Engineering) · December 22, 2025 · 38 min
• Does Security Awareness Training Even Work? Fixing the Flaws Behind “Training Fails” Headlines · November 16, 2025 · 38 min
• State of Phishing 2025: Why SVGs Spiked (and What Still Works) · October 30, 2025 · 46 min
• A CISO’s Playbook for Security Comms (with Jeffrey Brown) · October 14, 2025 · 53 min
• Virtual Kidnaps, Fake CFOs: Social Engineering Defense in the Age of AI · September 18, 2025 · 38 min