The need for information security ”know-how” has permeated to all aspects of modern society. Nowadays, information security is no longer a problem faced by organizational users alone. Individuals often use online services in cyberspace on a daily basis for activities ranging from personal banking to social networking. The need to educate users regarding secure behavior in cyberspace has subsequently also become well established. This paper firstly argues that approaches towards such ”cyber-security” education should be based on the same Web 2.0 philosophies and paradigms that made the use of the Web in daily life so popular. Finally the paper briefly discusses the need for future research to enable such an approach towards information security education.