Stress that a security awareness program is one of the least frequently implemented but most beneficial programs in an organization.
Explain that a security awareness program is designed to keep information security at the forefront of the users’ minds as they work daily. This helps stimulate them to care about security as well.
Establish that if the program is not actively implemented, employees begin to “tune out,” and the risk of employee accidents and failures increases.