Cybersecurity awareness training: What is it and what works best?