Information security and privacy awareness training is necessary so that organizational users of Ohio Department of Administrative Services (DAS)-managed information systems understand their responsibilities to protect state systems and the information they contain.