Security awareness training has failed, says PhishMe. Its YOUR responsibility to provide engaging and focused security awareness training. 54% of industry pros polled this year at Black Hat said their organizations conducted training on an annual basis. We advise starting with a basic scenario, usually an email with a link promising pictures of cute cats. Vary both the content and delivery method of your security awareness to continually engage recipients. Avoid vague messages like keep company resources safe, instead give users specific, actionable information that will help them change behaviour.”]
Source: https://informationsecuritybuzz.com/news/how-do-you-make-security-awareness-engaging/