Extreme amount of training? More like once a year online HIPAA test that everyone blows through with the occasional CISO phishing campaigns that at least one person fails.