Having successful risk management, information security, and compliance programs involves keeping management aware of information risk. Most organizations already develop awareness programs to ensure staff members are aware of risk—and their responsibilities to help reduce risk. Smart organizations will develop awareness programs for senior management, to ensure they too are informed about information risk and are aware how critical their support is to control it.