The education pace - the course frequency - is determined by both dynamic processes and scientific facts, where user data at an organizational or group level (e.g. course attendance, response, and retention behaviors) is merged with evidence-based findings on learning, motivation, readiness to change, and knowledge decay.
We believe it is important not only to convey information but also to pave the way for transformation, behavioral change, and such processes require ample time for the consolidation of new knowledge. The last thing we want is to generate stress in the end user, as stress correlates negatively with security awareness.
We also want to leave room in the curriculum for briefings on current threats, “Zero-Day-Classes”, Reminders, along with necessary knowledge updates, so-called Boosters.