Replication Package For The Project "Quantifying Security Training in Organizations Through the Analysis of U.S. SEC 10-K Filings"

<pre>The Security Awareness and Training (SAT) market exceeds a billion dollars annually, yet reliable data on organizational adoption remains scarce. Conflicting, survey-based figures from cybersecurity vendors leave researchers and decision-makers reliant on questionable insights. A new U.S. Securities and Exchange Commission (SEC) regulation, effective since late 2023, now requires companies to disclose cybersecurity strategies in annual Form 10-K filings—offering a more consistent data source. In this study, we analyze filings from U.S. companies across diverse sectors andsizes, using keyword searches and thematic analysis. Our findings help organizations critically assess SAT strategies and vendor claims, offer actionable insights for policymakers, and equip scholars with a coded dataset and crawling tools for ongoing longitudinal analysis.<br><br>Here we provide the <b>replication package</b>.The README details all files and their content.</pre>