Every employee must be trained on the corporate data classification policy, including those who do not typically use computers or corporate communications systems. Because every member of the corporate workforce—including the cleaning crew, building guards, and copy-room staff, as well as consultants, contractors, and even interns—may have access to sensitive information, anyone could be the target of an attack.