6.Practices, policies and user education