Effective security awareness programs require top-management buy-in, accountability for bad acts. Good awareness programs also require communication about the stakes involved in protecting corporate assets. Cisco, Genzyme offer rewards to employees who perform well by alerting security to a problem. Cisco: “Here’s what your protecting. A company with a $150 billion market cap, our customers” Genzyme: “When a merger and acquisition is announced, we do a presentation on day one” Both Cisco and Genzyme say they work to gain access to new employees from mergers.”]