The best way to start building a security awareness program (if you have time) is to take some measurements to find out where your organization is right now. How well do employees understand the threats they may face, the safeguards they should use, or the vulnerabilities they may be causing?

Whether you’re trying to address the findings of an audit, or have had a serious incident, the most important thing for you right now is to get something in place that can start correcting employee behavior to address the highest priority risks.