Cimento is headed to Black Hat USA — catch us in Vegas, Aug 1–6

Black Hat USA 2026 · Aug 1–6

Book a Meeting →

Book a Meeting →

Home / Topics / Low Engagement

Problem Brief

Low security awareness engagement.

98% completion. 2% attention. Both numbers are real.

98% completion. 2% attention. Both numbers are real.

98% completion. 2% attention. Both numbers are real.

Employees complete mandatory training because it’s mandatory — muted in a background tab. Completion tells you the checkbox got checked. Engagement is what determines whether behavior changes, and legacy programs quietly stopped measuring it.

The Problem

Why employees check out.

01

Irrelevance

A backend engineer and an AP clerk get the same generic module, so it’s specific to neither. People disengage from content that obviously wasn’t made for them.

02

Bad timing

Annual training arrives on the compliance calendar’s schedule, months away from any moment the lesson matters. Knowledge delivered out of context decays in weeks.

03

No consequences either way

Nothing changes whether you engage deeply or click “Next” 40 times. Employees learn the real lesson: this is theater.

Why Legacy Training Struggles

The format is the problem.

Long-form modules on an annual cadence were designed to satisfy auditors, and they do. But a format optimized for attestation can’t also optimize for attention. Gamification and cartoon mascots treat the symptom; the disease is content that’s too long, too generic, and too late.

What Modern Looks Like

Short, specific, and in the moment.

60–90 seconds

Micro-modules that respect the employee’s time. Short enough that skipping isn’t worth the friction of ignoring them.

Triggered by behavior

Coaching lands immediately after a simulation failure — the one moment the lesson is self-evidently relevant.

Role-specific

Finance sees invoice fraud. Engineering sees OAuth-consent lures. Executives see impersonation. Relevance is the engagement strategy.

Cimento's Approach

Engagement by design.

Cimento replaces the annual module with adaptive micro-training that follows real behavior. Total training time goes down; measured behavior change goes up — and completion evidence for compliance is still generated automatically.

In-the-moment coaching, private and blameless

Behavior-based adaptation — repeat patterns escalate automatically

Slack/Teams delivery where employees already work

Compliance evidence accumulated automatically in the background

FAQ

How do you measure engagement beyond completion?

Will shorter training satisfy our compliance requirements?

Can we fix engagement without replacing our platform?

Stop measuring attendance.

The 14-day Human Risk Baseline measures what your employees actually do — and shows where engagement has quietly become theater.

Get Started

See It Live

Explore how modern phishing simulations and real-time human risk insights can strengthen your security posture. Let’s talk.

Get Started

See It Live

Explore how modern phishing simulations and real-time human risk insights can strengthen your security posture. Let’s talk.

Get Started

See It Live

Explore how modern phishing simulations and real-time human risk insights can strengthen your security posture. Let’s talk.

Get Started

See It Live

Explore how modern phishing simulations and real-time human risk insights can strengthen your security posture. Let’s talk.