The first step in integrating security awareness into your work culture is by making it easy to classify sensitive and non-sensitive data. The second, and very, very critical step in creating a culture of awareness is by implementing regular, ongoing communication and training. Many employees are afraid to bring up security questions or concerns for fear of getting into trouble. Measuring never sounds fun, but it helps to quickly and clearly point out what is working and what is not, says Wisegate CEO Sara Gates.”]
Source: https://informationsecuritybuzz.com/articles/make-security-awareness-part-work-culture/