Read on Information Supplement: Best Practices for Implementing a Security Awareness Program. Check your organization if this is implemented. If not make a recommendation on possible implementation of security measures.