According to Forrester report, only one-third of employees receive security training. Less than half are aware of their organizations security policies, the report says. An effective security awareness and training program begins with establishing clear and enforceable policies. Companies should protect their users against threats such as viruses, phishing attacks and data breaches by implementing appropriate security controls in addition to intrusion detection systems, access management and a variety of other technology solutions. The Power of Positive Reinforcement is to reward users for positive behaviors.”]