The gap between what firms think their training is doing and what it's actually doing is where the real risk is, Patricia ...