The article discusses the importance of employees being aware of their role in securing information at work. It emphasizes that top management is responsible for managing information security. The study aims to enhance information security awareness in industry by developing an Information Security Retrieval and Awareness model. The research found a need to improve information security awareness in government, industry, and academia. It also identified a shift towards a more managerial approach to information security and the importance of creating an information security culture within organizations. Ten documents were identified as a basis for a Common Body of Knowledge for Information Security in industry, addressing both technical and non-technical issues.