As companies ingest more malware and targeted attacks than ever before, employee awareness education and training has become an integral part of an organization's security and risk program. Without it, companies lose a key component of their defense arsenal. In this video recorded live from the expo floor at RSA Conference 2016 in San Francisco, Michael Osterman, principal of Osterman Research, discusses the value of security awareness training and describes how companies can use it to build skepticism and remove gullibility from their workers.