Security Awareness & Training platforms reduce the human attack surface through phishing simulations, role-based security curricula, and compliance-mandated training. Core capabilities include phishing simulation campaigns with realistic template libraries, adaptive training modules assigned by role and risk level, micro-learning formats designed for knowledge-worker completion rates, compliance-framework training tracks (PCI, HIPAA, SOX, GDPR), susceptibility-rate measurement over time, and human-risk scoring that identifies repeat offenders for targeted intervention. Leading vendors include KnowBe4, Proofpoint Security Awareness, SANS Security Awareness, Wizer, and Infosec IQ.