Information security incidents and privacy breaches often result from risky behavior by personnel who are unaware that the way they are handling information is unsafe. A significant factor for this problem can be attributed to a lack of security policies, along with inadequate or nonexistent training and lack of awareness communications. According to a recent Cisco study [1]:
