We don’t advocate launching security awareness programs in January, October, or December. The beginning of the year, National Cyber Security Awareness Month, and the holiday season provide too many distractions for users to engage with something else new. Pick a surprising month, something unexpected and that you can “own” in order to get the best results.