A set of slides for use by legal or compliance to train non-experts in an organisation on information and cyber security. The training addresses key elements of an information and cyber security programme and should be customised according to an organisation's specific information security policy, legal and regulatory obligations, and culture.