Security awareness and training are important parts of any information security program. In essence, the training and awareness program serve to facilitate and improve the security compliance process and the overall security posture of the organization. A primary goal of security training and awareness is to change user behavior. Specialized security training needs to be targeted at the variety of audiences within that overall group (such as developers, ISSOs, and the network operations support group), and feedback from the individuals undergoing training helps to refine and improve the overall program.