According to ISACA and the CMMI Institute, organizations continue to invest heavily in security technology while neglecting security training to create the appropriate corporate culture.
Refer Here for Original Post and Source https://blog.knowbe4.com/having-a-cybersecurity-culture-matters-and-pays