> ISF: Companies Should Promote Secure Behavior, Rather than Awareness Alone

Organizations have spent millions over recent decades on information security awareness activities, but a recent report asserts that such an approach has flaws.