This	includes	carrying	out	regular	 phishing	campaigns	to	check	our	management	 procedures	are	robust.	 Everyone at RSA completes annual mandatory training	on	cyber	security,	data	protection	 and	information	security,	which	provides	 practical advice on how to protect data while highlighting	that	the	misuse	of	data	by	an	 employee	could	result	in	disciplinary	action.