HR can incorporate information security into position descriptions, onboarding processes, and regular training schedules. They can also create an environment where employees feel comfortable asking questions and prioritizing security in their work.