With those points in mind, it should come as no surprise that locking down executives' PCs, laptops and smartphones is unlikely to be a successful tactic. Therefore, increased focus should be placed on educating and training the executives and staff on the modern threat environment. The training must be relevant to executives and help them be part of the solution rather than part of the problem. Also, security-aware executives can help lead by example and reinforce the importance of security throughout the enterprise.