End users are commonly accepted as the weakest area of any organization's cybersecurity defenses. Part of the blame lies on poorly implemented, uninteresting, and ill-fitting awareness and training programs, all for the sake of checklist compliance.