Talk will present relevant research on why most cyber security awareness efforts fail and what the impact is. Specific flaws to be discussed include: alignment within the organization, ownership, content, testing, and validation. Real world cases of successful awareness strategies and their results will be discussed. Exercises will be used to allow attendees to leverage content and begin to formulate successful strategies. Finally, a set of tools and resources will be provided to guide practitioners in assessing their current strategies, identifying gaps, and planning next steps to improve their own organizations awareness programs.