Building awareness and training personnel on how to avoid or detect security threats and ensure their actions are secure.