Security awareness programs are not a replacement for solid security infrastructure and policies. The only thing awareness does is increase the odds of recovery, and increase response times should an incident occur. Security awareness is not the same as security training, when it comes to assessing compliance, which is what is most important. Security training serves to employees to look at the other hand, when assessing compliance. If done, it will become an extension of the company’s existing security program, and that could be the difference between preventing a disaster or suffering through one.”]