> corporate security trainings

Have you ever actually done corporate security training? It's very obviously 100% useless and not going to teach anyone anything.

A company I worked for actually started sending test phishing campaigns which is a lot more effective, but I thought they were still pretty obvious and also it led to stupid people reporting them on Slack endlessly.

Still, probably the best thing you can do.