We create training for both specific roles as well as targeted training for repeat offenders. The security knowledge required for general staff is different to your executive team which is different again to admin team and developers. Provide training to staff based on their role.