1. What does information security mean in the information processing environment I will protect? How sensitive is this stored information, how to deal with it and how to exchange information with the outside world? What government mandatory regulatory norms (such as HIPAA and SOX) have been implemented at present?

2. What is the company's security policy?

3. What is the company's security policy? How are these strategies implemented in daily work?

4. What are the key business processes of the company?

5. What impact does safety have on employees' daily work?

6. How much impact will a serious safety accident have on the company's health?

By answering these questions, we can better understand the information needed for the Information Security Awareness Training Course (ISATP). This information includes the corporate culture, the industry in which the enterprise is located, what norms have been implemented, and how the enterprise handles or stores sensitive information.