Ongoing security training

Every team member follows ongoing security-awareness training on phishing, social engineering, privacy and related topics. The point is to keep security continuously top of mind, so it gets weighed in on every daily decision. After all, most security incidents in history didn't start with a serious hack, but with someone kindly holding the door open for a stranger.