It is essential that all developers are aware of secure coding best practices and refresh this knowledge periodically.
We chose to have engineering managers track this for their teams vs. using the acknowledgment process as it is believed it will cause it to be better received.