Answers are grounded in this paper and cite their sources.
Security awareness training requirements set a minimum baseline for introducing security practices to an organization's workforce. But is simple compliance enough to result in behavior change?
No takes yet. Share an insight, caveat, or question.
Haney et al. (2020) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: