Information security awareness starts with the Nielsen Code of Conduct, which sets expectations for employees to protect confidential information, defines examples of confidential information and stresses the prevention of unauthorized disclosure.