Building a Cybersecurity Awareness Program
1h 22mIntermediate2024-01-03
Authors

Lauren Zink
Information Security Professional, Educator
Course details
By implementing a security awareness and culture program, you can turn people into assets—an extension of your security team—instead of possible easier targets for cybercriminals. A truly robust and mature security program makes educating employees a top priority in a company's overall multilayered approach. In this course, Lauren Zink shows how to develop and implement a successful, ongoing security awareness and culture program that's so much more than just one phishing simulation or an annual required training. True security awareness necessitates year-round, relevant, and tailored training and communications that create an overall cultural shift in behaviors you can measure. Through this course, discover how to sketch out your program plan, create a budget, leverage creative approaches for keeping your employees engaged, and assess the effectiveness of your program.
Skills covered
Security AwarenessProject LeadershipIncident ResponseProject ManagementCybersecurityOne-Off
Concepts
Introduction
- Discover cybersecurity awareness
- Defining security awareness - Going beyond the training to behavior and culture
Understanding the Current Security Awareness Foundation
- Getting to know your collaborators and partners
- Learning you company policies, standards, and guidelines
- Gauging the baseline knowledge of your audience and their appetite for security as well as baselining the risks
Developing a Solid Awareness Plan
- Developing a program plan and identifying resources needed
- Program plan creation demonstration
- Creating a budget
Implementing and Communicating the Security Awareness Program
- Creating brand recognition for security
- Introducing the program and communicating the why
- Developing a training plan
- Leveraging champions, ambassadors, and liaisons
Engaging Employees with Ongoing Awareness Initiatives
- Getting creative to reach your audience
- Communication is key to reaching your audience
- Social engineering simulations for experiential training
- Holding large-scale events
Measuring the Effectiveness of Your Security Awareness Program
- Measuring impact and behavior change
- Communicating the impact and building the team
Conclusion
- Next steps - Maturing and adjusting the program over time