QOTD on security awareness & education

Speaking about the need to educate users about information security and phishing attacks, Rohyt Belani, CEO of The Intrepidus Group, said:

user education should be approached like a marketing exercise -- if users are nodding off, it will never be effective.

The information security community needs to get more creative in educating users about the dangers facing them in this web 2.0 world. How about a series of books and cartoons portraying the average users and the mean hackers?

Src: 23 percent of users fall for spear phishing | SC Magazine US