Training is the most common investment firms make in vulnerability. It is also the one most likely to fade. Here is why, and what to do instead.
If we asked every firm we have worked with to name the first thing they did when vulnerability became a priority, the most common answer would be training. It is the natural starting point. Colleagues need to understand what vulnerability is, how to recognise it, and why it matters.