Security awareness is a term that most information security professionals are familiar with – security culture a little less so.
“Security awareness training is based on a behavioural theory that was debunked decades ago,” says Kai Roer, co-founder of European security startup CLTRe.
“The Rational Economic Theory says that if you know the best action to take when given a choice, you will always make the better – and rational – choice.
