21% of the organisations surveyed never provide any security awareness training for their employees.