Once you have developed and committed to a plan, think about how you will train all staff (and volunteers) on these new best practices. Requiring regular training - and making attendance of training mandatory and an evaluation point for staff performance reviews - can be a helpful tactic. Avoid creating harsh, negative consequences for staff who struggle with security concepts. Keep in mind that certain staff may adapt to and learn about technology differently than others based upon varying levels of familiarity with digital tools and the internet. A fear of failure only further disincentivizes staff from reporting problems or seeking help. However, creating positive accountability and rewards for successful training and adoption of policies can help incentivize improvement across the organization. You may find additional valuable support through local or international digital security training networks and free training resources such as the Umbrella app from Security First, the Totem Project from Free Press Unlimited and Greenhost, and the Global Cyber Alliance Learning Portal.