Culture and Org. -> Education and Guidance: Reward of good communication
Risk and Opportunity
Risk: Employees are not getting excited about security.
Opportunity: Good communication and transparency encourages cross-organisational support. Gamification of security is also known to help, examples include T-Shirts, giftcards and 'High-Fives'.
Required knowledge: Medium (two disciplines)
Required time: Low
Required resources (systems): Very Low