Security awareness training is not just an option, but a strategic imperative.