Traditional form of security awareness training rarely achieves what it’s set out to do. Instead, valuable time is taken out of employees’ days to complete training that positions them as the problem, thereby reinforcing a negative stigma and undermining the entire process.