ABSTRACT To help employees recognize and change their computing security behavior, organizations need to invest in cybersecurity training and awareness programs to encourage their employees’ active engagement in complying with their security policies. However, many organizations’ cybersecurity training and awareness programs fail to achieve their goals as employees feel bored with such training programs and lack enthusiasm to participate in them. Highlighting the criticality of the success of cybersecurity training and awareness programs in organizations, this paper identifies best practices and provides actionable insights (relating cyber awareness to employees’ personal life, reinforcing security procedures and guidelines, instilling a “relaxed alert” state of employees, and minimizing security fatigue for employees) that will help enterprises develop and implement economical, effective, and engaging cybersecurity training and awareness programs.

中文翻译：

---

企业网络安全培训和意识计划：成功建议

摘要 为了帮助员工认识和改变他们的计算安全行为，组织需要投资网络安全培训和意识计划，以鼓励他们的员工积极参与遵守他们的安全政策。然而，许多组织的网络安全培训和意识计划未能实现其目标，因为员工对此类培训计划感到厌烦，缺乏参与热情。本文强调了组织中网络安全培训和意识计划成功的重要性，确定了最佳实践并提供了可操作的见解（将网络意识与员工的个人生活联系起来，加强安全程序和指南，灌输员工的“放松警惕”状态，