April 22, 2003 Security Professionals Workshop 1 Best Practices in User Education: A Critical Component in any Information Security Program Shirley Payne.