If you could, which security reporting methodology would you recommend promoting an organizational “security culture” within your present organization to achieve an objective wherein employees and stakeholders are more knowledgeable and proactive about threats to information security?
