Security awareness isn't just education, communications and training. It is cultural change and a movement that requires buy in from the top down and the bottom up. All too often, employees are told they are the weakest link, but they can also be a huge asset to any security team if they are given the right tools and trained properly.