When data breaches continue to occur despite training, it indicates that there may be underlying issues that are not being addressed by the current measures. In such cases, the project manager should apply a root-cause analysis to identify the underlying causes of the data breaches. This could involve engaging a team of forensic experts to conduct a thorough analysis of the incidents12. The root-cause analysis will help to identify whether the breaches are due to technical vulnerabilities, procedural issues, or human factors. Once the root causes are identified, appropriate measures can be taken to address them. This could involve changes to systems, processes, or further training1234. References: What Should Companies Do After a Data Breach? | UpGuard1; 6 Steps to Developing a Data Breach Response Plan - Spectral2; Data Breach Response: A Guide for Business - Federal Trade Commission3; What Is a Data Breach? Best Practices and Fixes for Businesses - G2