Have done
Will likely undertake
Will possibly undertake
Unlikely to undertake
Won't undertake
Not sure / not applicable
Effectively train all employees
Routinely and repeatedly spread awareness
Cultivate a cyber aware and secure culture
Establish practical rules and goals
Implement sanctions for employee non-compliance