In the eyes of regulators, you're expected to clue in the clueless. Training people in basic IT security is difficult, too, but it's still done. Of course the

In the eyes of regulators, you're expected to clue in the clueless. Training people in basic IT security is difficult, too, but it's still done. Of course the results aren't going to be perfect, but at least most people will then understand that writing down a password on a post-it under a keyboard is a no-no.