General audience training

- Onboarding security module (mandatory) - Annual refresher (role-based content) - Monthly microlearning (2-5 minutes, scenario-based) - Quarterly campaigns (themes: phishing, passwords, data handling, remote work)