Luckily for us, aside from very technical subjects such as firewalls and data backups, security affects all of us in our personal lives too.

To take the simple example of phishing, I've found that employees and executives are very receptives to such trainings, as they want to avoid major data breaches at work, and also mitigate the risks of identity/bank theft at home. I think a basic understanding of internet security - e-mail, surfing, social networks - is a necessary first step. Since most schools unfortunately don't teach what should soon become mandatory knowledge in today's world, the workplace might be a good place to start.

Building from there, more advanced procedures might be put into place once a basic understanding of internet security is shared within the company.