Towards Effective Cybersecurity Education and Training