An organization with a strong culture of security should set specific criteria for measurement of not only the technology and processes but also the human issue. Failure to develop and implement an effective security awareness program puts your organization at risk because the people are the most common targets for cyberattack to your organization resources.

It is important that your organization train staff on how to react and respond when facing a threat.