{"id":342,"date":"2024-04-15T15:08:44","date_gmt":"2024-04-15T15:08:44","guid":{"rendered":"https:\/\/amaru.co.nz\/fj\/?post_type=blog&p=342"},"modified":"2024-05-22T16:11:04","modified_gmt":"2024-05-22T16:11:04","slug":"the-forgetting-curve-security-training","status":"publish","type":"blog","link":"https:\/\/amaru.co.nz\/fj\/blog\/blog\/the-forgetting-curve-security-training\/","title":{"rendered":"The Forgetting Curve \u2013 Security Training"},"content":{"rendered":"

It\u2019s something we all know instinctively, if a whole load of new information is thrown at you, your recall of it will be somewhat cloudy one week later. This is exactly what German psychologist Hermann Ebbinghaus showed back in 1885 when he developed the forgetting curve. Though his research is over a century old now, the principle remains true today. Most of what you learn will be forgotten within an hour.<\/p>\n

\n
\n
\"\"<\/div>\n<\/div>\n<\/div>\n

This may help explain in part why people are still falling victim to phishing attacks. Did their security training consist of being herded into the break room for a lunch and learn while being shown a bunch of slides on how to recognise the signs of a phishing attack? Was that the entirety of their security training for the last 6 months? If so, as Ebbinghaus showed, memory retention will be down around 20%, so mistakes and clicks will be made!<\/p>\n

So how do you get around this? Well, Ebbinghaus also showed that revising the information frequently greatly enhances the newly learned information. Translating this to security awareness training for staff members<\/a>, we can see that training must be repeated frequently; think short snippets every month rather than a 1-hour presentation every 6 months.<\/p>\n