Too many organisations wait until an employee’s error results in a breach before they take employee security training seriously Computer-based training and occasional email blasts are simply not enough You need a company-wide security awareness program that encourages cooperation and communication  not just compliance with security policy and procedures