I have come to the conclusion that most awareness programs are just very bad, and that like all security countermeasures, there will be an inevitable failing.
Ira Winkler on e-discovery, corporate counsel and the security pro's real role in risk mitigation