95% of organisations in the region already use threat intelligence to inform their security awareness training programs. But there are significant gaps. While most organisations reported being targeted by telephone-oriented attack delivery (TOAD), less than a third train on this tactic. In Germany, 78% of organisations experienced TOAD attacks, but only 21% train on the technique—one of the largest gulfs between daily attacks and training topics.
Overall, more time is being devoted to security awareness training across the region. Spain saw the largest increase, with a 120% rise in organisations spending three or more hours per year.