Information Security Awareness Program plays a vital role in establishing a good information security culture in an organization.