An organization's IT security team has noticed increased suspicious email activity targeting its employees. The IT team plans to create different campaigns to address this issue as part of its response strategy. What should be the team's initial focus to enhance awareness and protection against these email threats