A good training programme is a cost-effective way to reduce cybersecurity risk, but it needs executive support to succeed. A senior employee at one of Australia’s top universities received a seemingly innocuous email. He...