In this short paper we discuss the shortcomings of on-the-job training and conventional classroom instruction for cyber security, review the characteristics of successful security simulation programs, and take a brief look at the Symantec Cyber Security Services: Security Simulation program.