A question we are commonly asked is how do we create our awareness content, what processes do we use? How can we ensure our content will have the greatest impact possible? Most awareness programs take a haphazard approach to content by randomly picking topics for their program, there is no analysis on what are the top human risks to the organization, nor any analysis on which behaviors will mitigate those top risks. As such, we just posted a document that details the processes we use, starting with the people who are involved building this content, including an active Advisory Board of over 30 SANS Instructors, industry subject matter experts and existing customers. In addition, we actively review and update this content twice a year.