Inherent to any conversation about cyber awareness training is the reality that organizations need to change their cultures, which can’t happen without strong leadership. As we’ve seen with mobile security strategies, though, business efficiency and productivity too often trump security.
The very idea that companies need to change their corporate cultures to truly make security awareness part of their profit and loss statements might be too Pollyanna for some.