The final word

Jumping directly to often mind-numbing, glassy-eye-causing, security training is not usually the best approach to changing employee behavior.  Employees have to understand why protection of information assets is important, and why they should care.  Awareness efforts, beginning with the first day of employment, and regularly reinforced, are the best way to get them interested in taking the next step.

Using post-presentation employee input, and actually using it to tailor the message to better fit the audience, is another great way to keep employees involved.