text: I personally don’t think phishing training is the biggest con in cybersecurity. 
  
  The challenge I see repeatedly is that most companies don’t tie phishing training to repetitive bad user behavior and even then… that’s not incentivizing “good behavior” - that’s more targeted punishing the end user.