Security awareness should be an ongoing campaign, not just an event. That campaign, just like any marketing campaign, starts with a thorough understanding of the target audience — the people you wish to influence to adapt security best practices.
https://www.securitymagazine.com/articles/96584-try-creating-employee-personas-to-customize-your-security-communications-efforts
