One of the best examples of us collectively and repeatedly banging our heads against the wall is Security Awareness Training. We require our entire organizations to complete this training every year.
Organizations have relied on cyber awareness training for years ... taint results and give organizations a false sense of security - and worse - an overconfidence in the cyber capabilities ...