The world is currently experiencing an unprecedented technological revolution. We are witnessing a great increase of new and different ways in which technology is influencing and impacting human life. Mobile apps, social networking, the digital economy, Web 2.0, etc., are just a few keywords that redefine the way we do things at all levels in life. What about information security? Are security awareness trainings effective? Do employees pay attention to them? Is Information Security really 90% about people or 10% about technology ?