Explaining best practice security to the team

How are you communicating best security practices with your team now and what has changed?