The usage of cyber resources and human-computer interaction is often considered to be the weakest link in protecting the cybersecurity within an organization. Security awareness and trainings are useful, but an effective security culture program is more b