Training is based on a dedicated handbook that contains details of information security policy and practice, and other programs, including e-learning and training sessions, are held as appropriate for the size and training background of the individual Group company concerned.