Cyber awareness training is crucial to detecting attacks, whereas technology cannot protect against careless or foolish behavior. It is important for organizations to help their users recognize malicious contact whereas ransomware is typically introduced through email and social engineering techniques to either download a file, provide key sensitive information or take some action that will bring harm to the organization.  According to KnowBe4 Osterman report, there are number of approaches to security awareness training that are practiced by organizations and managed by security teams. There is the break room approach which are special meetings periodically held  to talk about security; monthly security videos with short snippets of security information; simulated phishing tests which target users with internal phishing messages; human firewall approach where everyone is subject to simulated phishing and those employees that are prone to attack are identified; and then there is the do-nothing approach where cyber awareness training does not exist in the organization.