Security operations, which was the top security priority last year, has fallen to third place. Security awareness training is now the second priority.