I’ve never made exceptions to opt company executives out of security training. I have subjected executives to additional training tailored to their roles and threat profiles. Executives leading by example is key in high functioning organizations.
For organizations that have _mandatory_ security training, what % of your _executives_ complete that training?