how to perform better security?

hi, i’am the one who asking the recovery plan before. but when i started to do my assignment, my lecturer told me that the security that i suggested could be use like training on the staff. but he suggested is the i.e. sucurity policy? could someoneplease help me to solve since i am very new to face the problem thank you.