The market for end-user-focused security education and training is growing rapidly. Security and risk management leaders’ need to influence the security behaviors of people — employees, citizens and consumers — is fueling demand for these products. Interactive computer-based training (CBT) is a central component of a comprehensive security education and behavior management program. CBT delivers a learning experience through computing devices, such as laptop computers, tablets, smartphones and Internet of Things (IoT) devices. Vendor offerings in the market for CBT on security awareness include ready-to-use, interactive software modules. These modules are available as internet-based services or on-premise deployments through client-managed learning management systems (LMSs) and the vendors’ support for the Sharable Content Object Reference Model (SCORM) standard.