Knowing CSIS and the great work that they do, I know a lot of the information today is really one way. They gather information and evidence and then they pull it back. Have some of the information come the other way and share what it is and how to approach it, as Kevin pointed out. Share what behaviours they should be on guard for and how to manage that.
Really, with a lot of the institutions that I work with, it's inventor-owned policies. The researchers themselves are left a lot times to their own devices. It's recognizing that and then building programming resources to be able to initiate that.