You've been appointed as the new Information Security Manager for a global organization. During a routine review, you observe that security awareness varies among different regions. To present a comprehensive picture to the board, which element would be the most important to include in your report?