ELEMENTS OF A GOOD

SECURITY AWARENESS
PROGRAM
BY
YUSUPH KILEO CYBERSECURITY AND DIGITAL FORENSICS EXPERT

INTRODUCTION
Fighting cybercrime and enhancing cybersecurity there are 5 things to
consider and put in place.
a. Security awareness programs
b. Capacity building
c. Legal framework
d. Collaboration
e. Open statistics

4/30/2015

22nd Annual IT Managers Congress

SECURITY AWARENESS PROGRAM

One of the biggest risks to an organizations information
security is often not a weakness in the technology control
environment. Rather it is the action or inaction by employees
and other personnel that can lead to security incidents.
Security awareness program is there to help minimise a gap
to the information security risks to the organisations.
Therefore, Security Awareness Programs are a valuable part
of every companys security strategy.
4/30/2015

22nd Annual IT Managers Congress

ELEMENTS OF A SUCCESSFUL AWARENESS

PROGRAM
Make it entertaining
Use Headline Marketing
Multimedia is King
Repetition
Make it personal

4/30/2015

22nd Annual IT Managers Congress

BEST PRACTICES IN ORGANIZATIONAL

SECURITY AWARENESS
Assemble the Security Awareness Team - The first step in the
development of a formal security awareness program is assembling a
security awareness team. This team is responsible for the development,
delivery, and maintenance of the security awareness program.
Determine Roles for Security Awareness - Role-based security awareness
provides organizations a reference for training personnel at the appropriate
levels based on their job functions.
Know your target Audience - The key to an effective security awareness
program is in targeting the delivery of relevant material to the appropriate
audience in a timely and efficient manner. To be effective, the
communication channel should also fit the organizations culture.
4/30/2015

22nd Annual IT Managers Congress

SAMPLE SECURITY AWARENESS PROGRAM

4/30/2015

22nd Annual IT Managers Congress

4/30/2015

22nd Annual IT Managers Congress