We have also conducted social engineering email drills to strengthen employee awareness and deployed a mechanism that integrates relevant information security areas like participation, education and training, abnormal incident management, confidentiality classification and antivirus/software security as part of employees’ KPI performance.