SANS Institute’s cover photo
SANS Institute

SANS Institute

Computer and Network Security

Rockville, Maryland 359,479 followers

SANS is the most trusted resource for information security training, cyber security certifications and research.

About us

SANS is the most trusted and by far the largest source for information and cybersecurity training and certification in the world. It also develops, maintains, and makes available at no cost, the largest collection of research documents about various aspects of information security, and it operates the Internet's early warning system - Internet Storm Center.

Website
http://www.sans.org/
Industry
Computer and Network Security
Company size
201-500 employees
Headquarters
Rockville, Maryland
Type
Privately Held
Founded
1989
Specialties
Information Security Training, Digital Forensics Courses, Cyber Security Training, Security Awareness Training, Penetration Testing Courses, Application Security Courses, Security Leadership Courses, Industrial Control Systems Security Courses, cloud security courses, blue team operations courses, cyber security certifications, security awareness training, cyber security white papers, cyber security webcasts, and cyber security policies

Locations

  • Primary

    11200 Rockville Pike

    Suite 200

    Rockville, Maryland 20852, US

    Get directions

Employees at SANS Institute

Updates

  • SANS Institute reposted this

    Quick story: I am quite possibly the biggest Star Wars fan on the planet. I spent a long time planning how my twins would experience Star Wars. Before my kids could experience the movies (the right order, perfect cadence), my neighbor casually drops the bomb... (spoiler alert!) that Darth Vader is Luke's father. I freely admit to some dark side thoughts toward this guy. May have disowned him. Several times. But if you have the incredible fortune of life handing you boy girl twins, the Luke Leia parallels technically make me Darth Vader in this scenario. The team at SANS gave me a Vader helmet signed by David Prowse at the 10th anniversary DFIR Summit. Best gift ever. Looking forward to seeing security peers and friends who would actually get how much of a crisis this was at the SANS Institute AI Cybersecurity Summit in April.

    • No alternative text description for this image
  • 🚀 Ready to boost your cybersecurity career? The 2026 Winter SANS Cyber Solutions Fest is your gateway to cutting-edge insights & invaluable connections. Secure your spot now & join us Live Online February 11 & 12 to be part of a global community shaping tomorrow’s cyber landscape! Tracks Available: 🏦 Finance/Banking 🩺 Healthcare ⚙️Utilities/Critical Infrastructure Learn more and register here: https://go.sans.org/oHQsnd #SANSCyberSolutionsFest #Finance #Healthcare #CriticalInfrastructure

    • No alternative text description for this image
  • SANS Institute reposted this

    Most ICS security programs don’t fail due to lack of intelligence. They fail because intelligence can’t be applied where it matters most. SANS Fellow, Robert M. Lee, explores why turning compliance into operational capability, through visibility, validation, and control coverage, is what actually reduces impact when incidents occur. 👇 Read the blog: https://go.sans.org/g7LmW1 #ICSsecurity #OTsecurity #IndustrialCyber #CriticalInfrastructure #CyberResilience #SANSResearch

  • SANS Institute reposted this

    Mary K. Pratt just released a writeup on the top four issues holding back CISOs’ security agendas. Shadow AI is just one of the problems spiraling your risk. Prohibition doesn't change the underlying constraint. Banning AI tools hinders the security department’s success, then the business bypasses security altogether rather than have to slow or stop its AI journey. There needs to be a structural rethink in how to approach risk. CISOs who keep pace establish risk profiles for specific data. Security stops wasting cycles on low-risk deployments. They prioritize medium- and high-risk cases instead. They assign security staffers to individual departments to stay on top of AI needs, and they train security teams on the skills needed to evaluate and secure AI initiatives. How to get there? Sunlight AI is an antidote to the Framework of No (deny-by-default resulting in Shadow AI): https://lnkd.in/dpqtg77S Mary's article CSO Online: https://lnkd.in/ekJ-2auv SANS Institute

  • 🔐 Considering a move into cybersecurity but unsure where to start? The SANS Cyber Academy United States is built as a structured on-ramp into entry-level cyber roles. The program starts with foundational training and progresses intentionally, so learners build skills in sequence rather than trying to piece things together on their own. As participants advance, they also gain access to career services support, including resume review and interview preparation, to help connect training outcomes to real hiring conversations. If you or someone in your network is exploring a cybersecurity career path, this is a strong place to start. 🎯 Apply here: https://go.sans.org/HnWgBE Applications close February 13, 2026 at 10 am ET

    • No alternative text description for this image
  • View organization page for SANS Institute

    359,479 followers

    Checking the box ≠ managing human risk. ☑️ If success still looks like "everyone completed training," most programs haven’t moved beyond stage 2 compliance. In this video, Lance Spitzner explains why identifying real human risks and behaviors, not just running activities, is the foundation of security culture. 📘 Download the 2026 SANS Security Awareness & Culture Maturity Model™ to see where your program truly sits and what comes next. https://go.sans.org/qCNabT #SecurityLeadership #HumanRisk #SecurityAwareness

  • SANS Institute reposted this

    Step into the executive seat during a real-world cyber crisis. The WiCyS SANS Institute Executive Cybersecurity Exercise (RSAC 2026) is a 90-minute, immersive simulation designed for senior leaders who are responsible for guiding their organizations through high-stakes cyber incidents. Led by SANS experts, this exercise focuses on strategic decision-making, crisis leadership, and the importance of a well-rehearsed cyber response plan—all within a safe, realistic environment. Participants will: • Assess organizational readiness during a cyber crisis • Apply industry best practices in cybersecurity and crisis communications • Explore emerging trends in cybercrime • Earn 2 CPE credits 📅 Applications open January 29 and close February 26 at 4 p.m. CT 📍 Exercise takes place March 23 (RSAC 2026) 🔒 Open to senior-level managers (CISO, CIO, Deputy CISO, VPs, Directors of InfoSec). This executive experience is by invitation only and tied to in-person attendance at the WiCyS 2026 Conference. If you meet the requirements and haven’t received an invite by Feb. 5, contact adaeze@wicys.org #WiCyS #SANS #ExecutiveLeadership #CyberCrisis #RSAC2026 #WomenInCyber #CybersecurityLeadership

    • No alternative text description for this image

Affiliated pages

Similar pages

Browse jobs