Employee awareness is not a simple check-the-box exercise. Companies must invest in comprehensive, ongoing programs to minimize the weakest link syndrome. In this regard, workforce-wide cybersecurity training is only the first step. Reinforcing and testing the awareness training over time will also allow for optimization and point to where knowledge gaps exist. Post-test evaluations and ongoing improvements are also required to fully realize the benefits of cybersecurity awareness training.