WHY?
* https://www.sans.org/reading-room/whitepapers/awareness/importance-security-awareness-training-33013
HOW?
* https://www.pcisecuritystandards.org/documents/PCI_DSS_V1.0_Best_Practices_for_Implementing_Security_Awareness_Program.pdf
* http://www.govtech.com/blogs/lohrmann-on-cybersecurity/Ten-Recommendations-for-Security-Awareness-Programs.html
WHAT?
* https://www.linkedin.com/pulse/7-essential-security-awareness-training-topics-mike-carthy