An effective and successful cyber awareness training program must be sponsored from the top of the organization with supporting policies and procedures which effectively outline ramifications of non-compliance, frequency of training and a process for acknowledgement of training. Without sponsorship from the “C-level” executives the training cannot be ignored.  Other factors that are key to a successful Cyber Awareness Training program is to establish a baseline identifying the level of knowledge of the organization to establish where the users are in their knowledge prior to training and after. Whichever approach an organization decides to implement, it is important that the organization has policies and procedures in place that provide training that is up to date, performed frequently and has the backing of the entire organization from the top down.