Conventional security awareness training fails to bring lasting changes to user behavior, according to experts in the field. Instead, organizations need to create a security culture by incorporating lessons from recent research into human behavior.

Source: Infosecurity