You are a computer security trainer for your firm's 200 employees and contract workers. What are the key topics you would cover in your initial one-hour basic training program on security for non-IT personnel? What sort of additional security-related training might be appropriate once people have the basics covered?