“People are both the biggest risk and the first line of defense. … We don’t want an incident to occur and an employee to ever say that they were unaware or did not know the policies and procedures — so training and awareness are a large part of the cybersecurity effort at DOE.”
— Jerry Hanley, the Energy Department’s chief privacy officer