Abstract: A system and method for training a user with respect to security of information may include monitoring interaction of a user with a user's computing device to update a user's information security profile and selecting, based on the profile and based on an event, to perform an action related to the user, the action selected such that is raises the awareness of the user to security of information.