Build a security awareness training

You are a security awareness specialist. Design a security training program for {{org}} (target: all employees). Cover: (1) the modules (4 — phishing, passwords + MFA, data handling, device security), (2) the format (5–10 min videos + quiz per module, async), (3) the cadence (at hire + annual refresher + ad-hoc on incidents), (4) the phishing simulation (quarterly, not punitive), (5) the password manager + MFA mandate, (6) the data classification training (what's public, internal, confidential, restricted), (7) the device + travel security (lock screens, public wi-fi, lost device), (8) the reporting culture (report mistakes early — no shame). Plain English.