The University of SydneyPage 65Informal Controls–Security awareness is a cost effectivecontrol–Increased awareness should be supplemented with an ongoing education and training program–Training and awarenessare extremely important in developing ‘trusted’ core of members of the firm–An environment of developing a common belief system–For example, https://www.sydney.edu.au/students/keeping-your-information-safe.html