ensure that employees are always in a position to take actions proactively in recognizing IT attacks (like spam emails), paying attention when they use public networks and services and protecting sensitive corporate information.