It is not uncommon for users to be unaware of the security threat that a practice or technology may introduce to an organization. Awareness and training involves helping users understand how their normal practices can impact security. Discuss ways IT staff can improve security through awareness and training. Provide specific examples.