A security program should consider how the organization will restore operations after an incident. During onboarding, Include the control in the new-employee checklist so it happens consistently. Keep the process simple enough that employees can follow it consistently.