Keep staff well-versed on security standards. Centralise policies, automate approvals and keep clear audit trails.