As we all know, the importance of security training has grown over the years due to the many frequent attacks and exploits that continue to occur today. This training is not only for our client base that we server as IT Professionals, but also for ourselves. This means we must also continue our training in order to better protect out clients.

This is a two part discussion. Initially, what are some steps we can take as IT Professionals to ensure we are able to mitigate security issues. What training, classes, certifications, etc. are appropriate and effective?

Next, as an IT Professional, what can you do to help mitigate security issues when it comes to your client base? What are some important types of training that you can effectively conduct? What types of training do you believe are ineffective? Why is that?

Feel free to provide examples of good training and bad training where applicable.