Traditional approaches to security awareness training are ineffective in changing human behavior because they're too often focused on negative consequences instead of positive reinforcement, according ...