The goal is to make awareness training an ongoing process while minimizing
impact on employee productivity. Run different awareness topics each month
using a combination of static and dynamic media, and try to alter the
materials once in a while to keep things interesting. Deliver the
information via audio/video presentations, screen savers, posters,
calendars, etc.
Ideally, your awareness program should reinforce the importance of
complying with your policies. People tend to ignore rules when they don't
fully understand the consequences. Therefore, you should incorporate any
organizational policies related to the monthly topic. Awareness testing is
a good way to accomplish this while verifying the effectiveness of your
program.
"Culture shift" takes time and requires constant effort, so 15-30 minutes
per month will work much better than an entire day or two annually.
Hope that helps.
- Rich
"Buowari, Dagogo (IMT/521)" <Dagogo.Buowari@nlng.com>
05/18/2006 04:17 AM
To
"Paris E. Stone" <pstone@alhurra.com>, "Cyber Gardie"
<cybergardie@yahoo.com>, <security-management@securityfocus.com>
cc
Subject
Information Security Awareness Program
Hi,
I?m doing a review of my company?s Information Security awareness strategy
and would appreciate if you could furnish me with new techniques / methods
of annually re-creating Information Security awareness amongst over 5000
employees.
Grateful if you could oblige my request.
BR//
Dagogo
Disclaimer Notice This e-mail, any attachments thereto and response string
is intended solely for the attention and use of the addressee(s) named
herein and may contain legally privileged and/or confidential information.
In the event that you are not the intended recipient(s) of this e-mail and
any attachments thereto, be notified that any dissemination, distribution
or copying of this e-mail and any attachments thereto, is strictly
prohibited. If you have received or otherwise encountered this e-mail in
error, please immediately notify the sender and permanently delete the
e-mail, any attachments and response string as well as any copy printout
in connection therewith.
