Managing an information security and privacy awareness and training program - Rebecca Herold (Auerbach publication, 2005)