Most organizations lock into multi-year contracts with vendors like KnowBe4 and end up with stale security awareness programs. A new assessment tool breaks NIST guidance into a SEAT framework—Strategy, Engage, Training—to help you evaluate whether your program actually works beyond phishing simulations.
I see a lot of programs in that spot where like they're either with KnowBe4 or like another provider on a 3-year contract and it just kind of gets a little stale. Is to take a step back and assess your program if you can. I've put together this tool. It's been a passion project for me of practitioners not really understanding the wholeness of awareness programs and what they can be outside of just phishing simulation and content. And I wanted to make a way to better understand like even like the latest NIST requirements that came out. There's a, it's all technical and there's a slew of like requirement or, you know, suggestions, recommendations. And so I chunked it into this like framework, it's called SEAT, S-E-A-T. So it stands for strategy, you gotta put strategy up first, right? And then the engage and training. And so it's an easier way to understand all the components of an awareness program. And then you can assess yourself based on those questions and everything aligns to NIST.
