Employee security awareness training is a best practice and a “reasonable safeguard” for protecting the privacy and security ...