Bayer Overhauls Security Awareness Training to Focus on Psychology Against AI Threats (infosecurity-magazine.com)

• Training shifts from technical checklists to psychological manipulation detection
• AI platform myGenAssist access requires training completion; tiered model
• SOC evolution to human-on-the-loop in 2-3 years; AI contract clauses for suppliers

"Bayer has revamped its security awareness training, shifting from technical checklists to psychology-first methods to counter AI-driven social engineering. CISO Kevin Jones detailed the new approach at Infosecurity Europe 2026, noting that conventional indicators like misspellings or suspicious URLs are ineffective against AI-generated attacks. The mandatory training teaches employees to recognize psychological manipulation, such as undue pressure or authority impersonation. Jones cited an incident where a CFO received a realistic call from a fake global CFO—staff reported it, and no losses occurred. Access to Bayer's internal AI platform myGenAssist is gated by training completion. Bayer also plans to evolve SOC analysts from human-in-the-loop to human-on-the-loop within 2-3 years and has added AI-specific clauses to supplier contracts."