A response to a Wall Street Journal critique of security awareness training (SAT) programs, arguing that the problem lies with poorly implemented programs rather than SAT itself. The post breaks down common failures — annual-only training, punitive phishing tests, irrelevant content — and outlines what effective SAT looks like: frequent short modules, real-world phishing simulations, story-based learning, personalized follow-up coaching, and a positive security culture. It concludes with a pitch for Huntress Managed SAT as a modern implementation of these principles.
