Building a Cybersecurity Awareness Program (2019)

Course details

By implementing a security awareness program, you can turn people into assets—not fragile targets. A truly robust and mature security program makes educating employees a top priority in a company's overall multilayered approach. In this course, Lauren Zink shows how to develop and implement a successful, ongoing security awareness program that's so much more than just one phishing simulation or an annual required training. True security awareness necessitates year-round, relevant, and tailored training and communications that create an overall cultural shift you can measure. Through this course, discover how to sketch out your program plan, create a budget, leverage creative approaches for keeping your employees engaged, and assess the effectiveness of your program.

Learning objectives
What is security awareness?
Leveraging company policies to drive communications
Surveying employees to understand threats
Developing an awareness plan
Developing a brand for your security team
Measuring the success of your program

Concepts

Introduction

Ready your security program
What is security awareness

Understanding the Current Security Awareness Foundation

Getting to know the teams
Understanding company policies
Survey employees to understand threats

Developing a Solid Awareness Plan

Developing a program plan
Understanding your budget

Implementing and Communicating the Security Awareness Program

Developing a brand
Creating traditional training
Finding security champions and liaisons

Engaging Employees with Ongoing Awareness Initiatives

Creating nontraditional training
Finding creative ways to brand
Conducting social engineering tests
Developing an annual training event
Making the security team accessible

Measuring the Effectiveness of Your Security Awareness Program

Measuring cultural change
What can you do with the metrics

Conclusion

Next steps