Blog post discusses the importance of applying business requirements to the formulation of a training strategy. Business analysts are invaluable in discerning the elements of corporate culture that will shape both security awareness training and role-specific security training. As the organization evolves, so will its culture, and the existing curricula will eventually lose relevance. The curricula must be continuously revised to reflect the changes in the organization and the changing threat landscape. This paradigm will improve the odds that security will remain a property of the evolving culture.”]
Source: https://www.csoonline.com/article/2137064/requirements-driven-information-security-training.html