Entity requires that new staff members complete Information Security Awareness training upon hire