Why do we take security awareness training? Why does (or doesn’t) it work? — Security awareness training is an interesting concept. Most of the published literature seems to point to the need for security awareness training to help reduce the threat of security incidents. The user presents an interesting challenge, with awareness and security policy compliance being two key components of risk mitigation. In…