Continuous engagement

- Phishing simulations (calibrated to sophistication) - Gamification and recognition programs - Security champions network - Internal security blog and newsletters - "Security moment" in team meetings