The PRIMARY focus of an ongoing risk awareness program should be to:

An effective risk awareness program aims to educate all personnel about the organization's risk landscape, policies, and their individual role in managing risk. This knowledge enables employees to identify, report, and appropriately respond to risks in their daily operations, directly contributing to better, more informed risk-based decisions across the organization at all levels.

Defining controls is typically a function of risk management or security teams, not the primary focus of a general risk awareness program for all employees.

Determining the impact of risk scenarios is part of a risk assessment process, usually performed by risk management professionals, not the core goal of a general awareness program.

While expanding understanding of risk indicators is a component of awareness, it's a means to an end; the ultimate goal is to translate that understanding into better decision-making to manage risks effectively.