Information security is crucial as more people can access and change information online. Users are a key part of security systems, but many security incidents are caused by users not following security rules. To prevent this, organizations need to focus on raising user awareness about security. By analyzing security incidents and losses, it is clear that implementing specific awareness programs can help improve information security.