How do we know our teams are prepared for the next attack? Organizations have poured thousands of dollars into traditional training techniques – is it working?