Youre trying to influence attitudes and approaches, not create security experts. Education can make a big difference to company security. Keep it personal; this will make it more effective. Make it engaging and interesting; tie it in with home PC security. Foster an attitude of openness; otherwise security problems will not be reported. Avoid making employees feel stupid, or youll just alienate them. Keep guidelines about what to do or not do, what to report, and who to report to as straightforward as possible.”]
Source: https://securelist.com/a-few-it-security-training-tips/30252/