Isn't it time cybersecurity shifts towards positive reinforcement cybersecurity training.

There are better ways to change cybersecurity behaviors than threatening or boring the workers!

Do we want them afraid and belittled, or do we want them to become savvy and advocates of good security practices?