A financial services firm has established and documented cybersecurity policies and procedures that are consistently implemented across all branches. They conduct regular training sessions and audits to ensure that these practices are maintained and effective. What tier best describes their cybersecurity implementation?
A company's IT department has identified an increase in phishing attacks targeting employees. To address this cybersecurity risk, what strategic action should be included in their comprehensive cybersecurity strategy?