AWR

The Goal is to stop treating security as a series of on-off events or activities and to create a proactive, pervasive culture where employees can recognize security risks and then take action on their own or escalate as appropriate.