Creating a Security Awareness Program

Introduction

• Discover cybersecurity awareness
• Defining security awareness: Going beyond the training to behavior and culture

1. Understanding the Current Security Awareness Foundation

• Getting to know your collaborators and partners
• Learning your company policies, standards, and guidelines
• Gauging the baseline knowledge of your audience and their appetite for security as well as baselining the risks

2. Developing a Solid Awareness Plan

• Developing a program plan and identifying resources needed
• Program plan creation demonstration
• Creating a budget

3. Implementing and Communicating the Security Awareness Program

• Creating brand recognition for security
• Introducing the program and communicating the why
• Developing a training plan
• Leveraging champions, ambassadors, and liaisons

4. Engaging Employees with Ongoing Awareness Initiatives

• Getting creative to reach your audience
• Communication is key to reaching your audience
• Social engineering simulations for experiential training
• Holding large-scale events

5. Measuring the Effectiveness of Your Security Awareness Program

• Measuring impact and behavior change
• Communicating the impact and building the team

Conclusion

• Next steps: Maturing and adjusting the program over time