True, there is a steady input of security-related information. But employees also get a steady stream of information from their managers and the media reinforcing the idea that individual employees and jobs really are of no value to the company. And if the employee has so little value, how valuable can the data and systems they work with be? All that security training must be meant for someone else.