Chapter 6 of the text (pp. 187-189) discusses professional ethics for security professionals. Within your current or past company, do staff generally believe similar to the fallacies mentioned in the text on page 187? What are some methods that you would suggest for security awareness training?