This executive position paper proposes recommendations for reducing the risk of a data breach at Wilmington University. A data breach could result in identity theft of students, faculty and staff, which is costly to the individual affected and costly to the University. The University has a legal and ethical obligation to provide safeguards against a data breach and remediation in the event a data breach occurs. Many data breaches are the result of an insider threat in which employees simply are either unaware of sound information security practices or fail to follow established policy and protocol. By surveying the information security awareness of faculty and staff, a baseline metric was formed and an information security awareness program was designed to meet the needs of the University and reduce the risk of a data breach. Subsequent surveys can determine the program's level of success and the changes needed. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com/en-US/products/dissertations/individuals.shtml.]