The best Security Awareness Training results in behavioral changes that reduce employee vulnerability at all levels. The problem is that most Security Awareness Training is dull and doesn’t engage users. It’s difficult to get participation to maintain employee alertness and compliance, even with the best quality content.
Employees don’t engage with static content or videos, and don’t retain knowledge. A new approach is needed to engage learners. Because if they aren’t engaged, they won’t learn to defend against cyber attacks.
And shaming your team for making mistakes fosters resentment and employee backlash… which in turn, reduces participation even further.