The groups focused their efforts on increasing everyone 's understanding of the risks associated with the organization 's information and the related policies and controls in place to mitigate those risks .
At this time , the organization faced a diverse array of security and data-related risks .