Top 3 areas to start

We all agree there is a need to increase cyber awareness in organisation. Which topic would you suggest management to focus on and why?

Hopefully we get enough overlap to come up with some form of priority for us to champion