- The Importance of the Human Firewall
- Creating a Security Awareness Program
- Step 1: Gather Information
- Step 2: Develop a Format and Forum in Which to Present the Information
- Step 3: Prepare the Program Material
- Step 4. Present the Program to the Pilot Group
- Step 5: Present the Program to Senior Management
- Step 6: Develop a Schedule for Updating the Program
Like this article? We recommend
Like this article? We recommend
Like this article? We recommend
Step 2: Develop a Format and Forum in Which to Present the Information
It's essential to determine both a format and forum for the program that will reach the most people successfully. The firm's culture should be considered in making the decision. Following are some of the potential formats:
Live presentations (this is the traditional method)
Internet/intranet
Email
Voice mail
In-house newsletter
You may want to hold a single presentation session in which all firm employees are addressed by members of the IS department, or smaller sessions with individual divisions of the firm.
Similarly, there are numerous ways to use the Internet or your company's intranet. For example, web-based learning can be employed in the form of a live, interactive "webinar," or a computer-based training module that's available for employees at their convenience.
Once the right combination of methods is selected, the forum for delivery must be decided. Creating a new setting for the security program may offer some benefits, such as stressing the importance of the topic to the firm. However, as the point of the program is to speed user acceptance and adoption of existing and planned security procedures, the program itself should be in line with current processes as much as possible.