knowledge and attitude members of an organization possess regarding the protection of the physical, and especially informational, assets of that organization