IBM in its 2014 Cyber Security Intelligence Index reported that 95% of all security incidents involved employee error. IBM would conduct a detailed employee opinion and satisfaction survey for each site, and then would make visible changes to the operation based on employee feedback. Security culture begins at the top, with the CEO or head of the company. Train your workforce and refresh them at least yearly yearly with security awareness, including the information security bullet bullet bullet, is a key piece of the puzzle, says John Defterios.”]
Source: https://www.csoonline.com/article/3048321/taking-the-pulse-of-your-information-security-culture.html