You dont have to spend a lot of money on some information security initiatives. You can get huge returns with small investments, but theres very little budget available. Awareness training can lead employees to pause before doing things that could put our company, our customer’s data or themselves at risk. If my training program keeps just one person from clicking an evil link, sharing sensitive data on Dropbox or using a compromised Internet kiosk, it will be worth the effort. The PCI framework provides guidance regarding security awareness.”]
Source: https://www.csoonline.com/article/2883394/awareness-on-the-cheap.html