Our questions this week revolve around training and culture.

The first is, “I’ve rolled out security awareness training, but it doesn’t seem to stick. How do you actually build a culture where employees care about cybersecurity?”

The second is, “We’ve been doing phishing tests, but people get upset and feel tricked. How do you balance training and testing without making employees resent IT?”

Want to get your own compliance or security questions answered? Ask them at ⁠https://blacksmithinfosec.com/ask