What's Happening?
Bayer, a leading life sciences company, has revamped its security awareness training to address the growing threat of AI-driven social engineering attacks. At the Infosecurity Europe 2026 conference, Kevin Jones, Bayer's Chief Information Security Officer,
announced a shift from traditional technical guidance to a psychology-first approach. This change aims to equip employees with the skills to recognize psychological manipulation tactics used in social engineering. The new training emphasizes understanding adversary psychology and encourages employees to question undue pressure or authority figures before taking action. This approach has already proven effective, as demonstrated by an incident where Bayer's staff successfully identified and reported a fraudulent financial request, preventing any loss.
Why It's Important?
The shift in Bayer's security training highlights the increasing sophistication of cyber threats, particularly those leveraging AI to bypass traditional security measures. By focusing on psychological awareness, Bayer aims to transform its workforce into a proactive line of defense against cyber attacks. This approach could set a precedent for other organizations facing similar threats, emphasizing the need for human-centric security strategies. The initiative also underscores the importance of continuous adaptation in cybersecurity practices to address evolving threats, potentially influencing industry standards and practices.
What's Next?
Bayer plans to integrate AI competence into its workforce by tying access to internal AI platforms to the completion of role-based training modules. This tiered access model aims to ensure that only trained employees can develop and manage AI-driven processes. Additionally, Bayer is implementing AI use clauses in third-party contracts, requiring suppliers to complete AI training and disclose their data usage practices. These measures are part of Bayer's broader strategy to enhance its cyber resilience and ensure compliance with its AI governance standards.
