Bayer Reinvents Security Awareness Training to Counter AI Threats
Bayer Reinvents Security Awareness Training to Counter AI Threats
https://www.infosecurity-magazine.com/news/bayer-reinvents-security-awareness/
Publish Date: 2026-06-15 02:32:02
Source Domain: www.infosecurity-magazine.com
Summary:
At Infosecurity Europe 2026, Bayer’s Chief Information Security Officer, Kevin Jones outlined the firm’s redefined approach towards cybersecurity in response to advancing AI-driven threats. Emphasizing the shifting paradigm from technical checklists to psychology-first awareness, Jones highlighted how employees are now trained to identify psychological manipulation in potential social engineering attacks. Bayer’s new approach proved effective when the CFO in EMEA received an AI-generated, believable phishing attempt. Jones also discussed how access to AI tools within Bayer is now contingent on completing specific training. Additionally, Jones highlighted a future vision where security operations center analysts will employ AI-assisted automation, transitioning from ‘human in the loop’ to ‘human on the loop’ to manage the increasing volume of agent-assisted processes. Furthermore, third-party collaborations and procurement contracts are now also integrating stringent AI-compliance and training mandates, ensuring overall network resilience.
Key Points:
- Psychology-First Security Awareness: Employees are trained to identify psychological manipulation rather than technical indicators because AI can generate sophisticated phishing attempts.
- Access Control and Training: AI competence within Bayer requires completing specific training modules, tying access to internal AI platforms to security protocols.
- Future of SOC Operations: Plans are in place to transition SOC analysts from manual triage to automation support, with the aim of moving to a ‘human on the loop’ approach within two to three years.
- Third-Party Compliance: Suppliers must complete AI training and adhere to strict governance policies, with enhanced transparency requirements incorporated into procurement contracts.
- AI Governance: An internal AI Governance Council oversees strategic AI use and compliance, ensuring that integrated suppliers meet these standards.
