An organization’s privacy and security policies are only as effective as its training. All the right work can be done at the top level, but if the messages are not clearly disseminated to staff, an organization can find itself in a difficult position.
