The groups focused their efforts on increasing everyone 's understanding of the risks associated with the organization 's information and the related policies and controls in place to mitigate those risks .
The groups wanted to make the risks more widely known and promote ways of combating them .