Pattern
Design out the memory dependency
For each control that depends on a person recalling guidance under pressure, look for a technical arrangement that makes the safe action the default or the only one.
The pattern
Claim: recommendation
List the behaviours the security program currently asks staff to remember. For each, ask what would have to be true for the wrong action to be impossible, expensive, or automatically reversible. Some will have no technical answer, and those are where training belongs.
The list is usually short once it is written down, which is itself informative about how much of the program rests on memory.