Security Training Needs Google Maps, Not Christopher Columbus

The author argues that traditional once-a-year, static security awareness training is outdated because threats and user contexts change rapidly; instead organisations should adopt dynamic, personalized training and easy reporting (e.g., phish alert buttons) that adapts in real time to behaviour, pressure, and evolving phishing tactics.