For your organisation to successfully deliver a framework of information security activities, there is a need to provide effective training and awareness activities to many individuals from across the business and possibly others who are external providers of business activities. This policy template provides a helpful foundation for establishing such an approach.