Phishing simulations, identity management training, GDPR compliance education, and employee best practices to foster a security-first culture.