To develop a successful training program, you have to understand why people are vulnerable to attacks in the first place. By identifying these tendencies in your training—for example, by drawing attention to them in role-playing discussions—you can help your employees to understand why we can all be manipulated by social engineers.