An organization may be following the necessary steps to ensure security, to include building security and risk management programs, training staff, and performing data protection. How can management ensure that everything is being done correctly and being done on a consistent basis? Note: in your response, focus specifically on the importance of security policies, procedures, and auditing in risk management, as well as the benefits of security awareness training