This is an interesting list from the team at KnowBe4. Clearly, they are self-promoting, but there is truth in the need for enhanced user awareness training at every level.
https://blog.knowbe4.com/you-need-to-know-the-top-10-it-security-trends-for-2017