From planning to post-game analysis, here are the best practices for managing an effective security awareness training program.