If a trainee can practice identifying phishing schemes and creating good passwords, improvement can be dramatic.
Hands-on learning still takes a backseat to old-school instructional models, including the dreaded lecture.