An organization is developing a security risk awareness training program for the IT help desk and has asked the risk practitioner for suggestions. In addition t...