A Security Awareness Program plays an important role in defining the security posture of an enterprise. When managers consider the nature of risk an organization is exposed to, the threats fall into two distinct categories: the risk of disaster and the risk of intentional abuse.
Using the online library resources, industry websites or published articles (scholarly or trade) find two sources which describe how security awareness impacts the success of an enterprise's security posture.