Having best practices determined is often the first step in preventing an attacker from getting information. Be practices can be taught through in-person training or through communication (email, newsletters, etc.). Best practices and general security/privacy knowledge is essential to all employees.
- Determine what best practices are already in place
- Determine if training is needed and how to communicate it
- Increase knowledge of employees about security and privacy