How to make effective security awareness training

http://www.esecurityplanet.com/network-security/how-to-offer-security-awareness-training-that-works.html?dni=83532297&rni=7743479

These are some good advices on how to make effective security awareness training.

The main points are:

1. Get management buy-in
2. Target your security training
3. Make it pervasive
4. Presentation is everything
5. Explain why security policies are needed
6. Show users specific examples of security no-nos
7. Make it easy for users to comply with security policies
8. Maintain the right attitude
9. Use the right metrics to gauge effectiveness of training

Advertisements