training courses on information security that are tailored to the trainees’ positions and business functions to help them fully understand the laws related to information security as well as the company's internal policies.