Organizational policies define the direction for an organization and contribute to its overall security culture by setting the tone on what is and is not acceptable.
chief information security officer
develop a comprehensive strategy to raise the security awareness