Аннотация
Employees can potentially expose their organizations to huge amount of cyber risk. This may happen through falling for phishing attacks, careless handling of sensitive data, or poor password management, many data breaches are directly or indirectly caused by user awareness issues. To tackle this, mature companies have implemented security awareness program initiatives. However, without fostering feelings of responsibility and accountability for cybersecurity among employees, these programs will not necessarily make an organization any safer or less vulnerable. This article provides general review on different ways of establishing robust security culture within companies and building effective security programs. The report also discusses current approaches and challenges of implementing information security awareness programs.