Are your users more likely to cause or prevent your next data breach? The debate continues on both sides of the argument with industry consensus showing users are greater risks than assets. The number of breaches initiated through attacks targeted at users is justification. What are organizations doing to change the dynamic and reduce the employee attack surface? This discussion will examine various approaches to change employee behavior and the results of those efforts.