From Awareness to Action: The Evolution of Security Training