The focus of your tailor-made communication concept depends on the prevailing ‘security awareness maturity’ in your organisation. Do we concentrate on creating a feeling of urgency first, or are your employees already convinced of the importance, allowing us to focus on converting intention into behavior? To determine precisely where to begin, we recommend a baseline measurement or extensive input from key stakeholders.