People, processes, and technology are often seen as the three pillars of Information Security. Although a proper balance between the three is seen as essential, the aspects of internal culture and employee training as they relate to the “people” pillar are often overlooked. As an Information Security program is only…