All employees and contractors are required to complete privacy and information security training on an annual basis, including: privacy compliance, information lifecycle governance, managing information and data, creating a safe cyber environment and business continuity.