Building an Information Security Awareness Program

The best defense against the increasing threat of social engineering attacks is Security Awareness Training to warn your organization's staff of the risk and educate them on how to protect your organization's data. Social engineering is not a new tactic, but Building an Security Awareness Program is the first book that shows you how to build a successful security awareness training program from the ground up.

Building an Security Awareness Program provides you with a sound technical basis for developing a new training program. The book also tells you the best ways to garner management support for implementing the program. Author Bill Gardner is one of the founding members of the Security Awareness Training Framework. Here, he walks you through the process of developing an engaging and successful training program for your organization that will help you and your staff defend your systems, networks, mobile devices, and data.

Forewords written by Dave Kennedy and Kevin Mitnick!

• The most practical guide to setting up a Security Awareness training program in your organization
• Real world examples show you how cyber criminals commit their crimes, and what you can do to keep you and your data safe
• Learn how to propose a new program to management, and what the benefits are to staff and your company
• Find out about various types of training, the best training cycle to use, metrics for success, and methods for building an engaging and successful program

Auteur

Bill Gardner is an Assistant Professor at Marshall University, where he teaches information security and foundational technology courses in the Department of Integrated Science and Technology. He is also President and Principal Security Consultant at BlackRock Consulting. In addition, Bill is Vice President and Information Security Chair at the Appalachian Institute of Digital Evidence. AIDE is a non-profit organization that provides research and training for digital evidence professionals including attorneys, judges, law enforcement officers and information security practitioners in the private sector. Prior to joining the faculty at Marshall, Bill co-founded the Hack3rCon convention, and co-founded 304blogs, and he continues to serve as Vice President of 304Geeks. In addition, Bill is a founding member of the Security Awareness Training Framework, which will be a prime target audience for this book.

Contenu

1. What Is Security Awareness Training? 2. Why Does Your Organization Need a Security Awareness Program? 3. Getting Management Buy-In 4. Understanding Infosec Threats 5. Training Cycle 6. Training Types 7. Building Engaging Training 8. Metrics 9. Why Most Security Awareness Programs Fail 10. Current Debate on Security Awareness 11. The Security Awareness Training Framework (SATF)