Security Awareness is the tool most used to inform and educate users on policy and accepted practices and procedures that support the university.  It is often the most important and, in many ways, the least expensive way to impact the overall security of an organization. An organization's staff is the most cost-effective countermeasure against security compromises and IT security depends on the cooperation of every user.