Security Awareness Training: Three Tips for a More Effective Program

There have been a number of headlines about the research announcing the first and most egregious issue. Fifty-six percent (56%) of study respondents indicate they have not received any security awareness training from their employer. If management is expecting people to not be the weak link in security but aren't training them, they are setting unrealistic expectations that are not founded in any other aspect of education. It's like giving the calculus final the first day of the semester and basing the semester grade off that one experience. Remember, the definition of insanity is doing the same thing repeatedly and expecting a different result. If you are not providing training, START!

Getting past that, we still have a number of other issues to address. If we are putting time, effort and money into training, great! However, we could be throwing good after bad if we are not providing appropriate methodologies and measurements for training. If program leaders cannot demonstrate improvement, funds will not be allocated. Here is how you can knock out a couple of those birds with one stone...

Continue reading full article