The Sony, CENTCOM, and just about every other major attack are proving that poor awareness is costing organizations a lot of money. The Verizon Data Breach Investigation Report has several categories related to failings of user awareness and more than half of all incidents detailed involve awareness failings. Organizations need to examine how to better implement awareness programs, and start allocating the appropriate resources to such programs. The most damaging attacks initially target humans, and that a proportionate amount of countermeasures needs to be allocated to making humans more security aware.”]
Source: https://www.csoonline.com/article/2879660/time-to-reprioritize-security-awareness-efforts.html