Security awareness and education programs fail because they’re boring, says Lance Spitzner. Successful programs don’t attempt to change corporate culture, but instead play to it, he says. CDC’s “zombie” campaign was successful, because it tapped into pop culture and was fun. Success relies in large part on employees being security-savvy enough to do the right thing at the right time. Use a Variety of communication methods: Spread the word via emails, newsletters, blogs or ecards.”]
Source: https://www.cuinfosecurity.com/blogs/security-awareness-dont-forget-fun-factor-p-1984