AI Overtakes Human Error Rankings as Cyber Training Costs Hit New Highs
Published on 09/02/2026 at 05:12 | Editorial boerse-global.de
The human factor has never been more expensive — or more complicated. Security awareness salaries have climbed to an average of $123,624 worldwide in 2026, up $7,000 from the previous year, according to fresh data from the SANS Institute's latest report. European professionals in the field earn an average of $106,896.
The compensation surge reflects a broader shift in how organizations view cyber risk. Artificial intelligence has jumped from the fourth to the second most dangerous human-related cyber threat in just two years, trailing only social engineering. That rapid ascent is forcing companies to completely rethink how they train employees on security matters.
The workforce behind the awareness
Building genuine behavioral change among staff requires more than knowledge transfer, the SANS research argues. Teams need at least three dedicated security awareness specialists and a runway of three to five years to see meaningful results. For organizations chasing a deeply embedded security culture, the bar rises even higher: more than four full-time positions and a five-to-ten-year commitment.
There's an irony in how security teams are responding to AI-powered threats. According to SANS, 75 percent of awareness teams now use AI tools in their daily operations — the same technology that's amplifying the dangers they're fighting.
New legal pressures reshape training obligations
Regulation is adding another layer of urgency. The NIS2 directive has substantially widened the scope of IT security requirements, tightening governance and risk management expectations across sectors. Legal experts are advising companies to bring their legal departments into the conversation early, particularly when assessing whether the directive applies to them, navigating registration procedures, and revising supply chain contracts.
Management teams also need thorough briefings on liability questions. NIS2 introduces a complex, multi-stage incident reporting process that stretches from initial notification through to the final report, and getting it wrong carries consequences.
Workplace safety rules are tightening too. The revised Hazardous Substances Ordinance, in force since late 2024, now obliges clients to pass detailed information to the contractors they commission. For buildings constructed between 1993 and 1996, for example, the exact construction start date must be disclosed to mitigate asbestos risks. Failures here can trigger fines, construction halts, and liability claims.
Keeping up with tightening workplace safety rules means making sure your risk assessments are always current and properly documented. A free toolkit with 41 ready-to-use templates and checklists helps you manage fire safety, manual handling, first aid and lone working without starting from scratch. Download the free Risk Assessment Toolkit
Court rulings sharpen certification requirements
The legal system is reinforcing the need for formal qualifications. In February 2026, the Hamburg Regional Labour Court struck down the dismissal of a radiation protection officer, ruling that the task assignment hadn't met the strict written requirements of the Radiation Protection Act. A general right to issue instructions, the court found, simply doesn't suffice.
Pharmaceutical technical assistants (PTAs) face their own credentialing hurdles. Since the 2023 reform, the continuing education certificate has become mandatory for working under responsibility, requiring proof of 100 training points within three years. A new regulation from May 2026 goes further, allowing PTAs with this certificate to take on temporary sole responsibility in rural areas under specific conditions.
Streamlining course administration
Not everything is getting heavier. The education ministry is pushing to eliminate state approval requirements for online courses, with the obligation under the Distance Learning Protection Act set to expire on July 1, 2027. That move would save the economy roughly 4.8 million euros annually.
Technology is also speeding up content production. Rational AG, for instance, now uses AI editors for process documentation, cutting creation time by a factor of four. The same tools can automatically translate training videos into over 100 languages, helping global corporations scale their security instruction efforts far more efficiently.
When hazardous substances are part of your operations, the paperwork can quickly pile up. A free COSHH toolkit provides 43 customisable templates, checklists and toolbox talks to help you meet your legal duty to assess risks from dangerous materials. Get the free COSHH Toolkit
