Growing IT security threats, coupled with regulatory mandates to protect information and ensure privacy, are generating a renewed focus on security awareness training programs, which can heighten security awareness, improve application and infrastructure security, and enhance security incident handling and response. Such programs not only benefit IT security staff and application developers, but they benefit the enterprise workforce at large.