Scribd Logo
Upload

Welcome to Scribd!

  • 1.12 Establish and Maintain A Security Awareness, Education, and Training Program

    Uploaded by

    Manoj Sharma
    74 views4 pages
    Security is a shared responsibility between organizations and individuals. Education programs should be tailored to different user roles to improve understanding of best practices and responsibilities. Effective training involves different methods depending on the level of insight, knowledge, or awareness needed, with education providing long-term understanding, training imparting intermediate skills, and awareness building short-term knowledge. Role-based and social engineering training help ensure the right training reaches the intended audiences.

    Original Description:

    CISSP Domain 1 - Security Awareness Trainings

    Original Title

    1.12 Establish and maintain a security awareness, education, and training program

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Security is a shared responsibility between organizations and individuals. Education programs should be tailored to different user roles to improve understanding of best practices and responsibilities. Effective training involves different methods depending on the level of insight, knowledge, or awareness needed, with education providing long-term understanding, training imparting intermediate skills, and awareness building short-term knowledge. Role-based and social engineering training help ensure the right training reaches the intended audiences.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    74 views4 pages

    1.12 Establish and Maintain A Security Awareness, Education, and Training Program

    Uploaded by

    Manoj Sharma
    Security is a shared responsibility between organizations and individuals. Education programs should be tailored to different user roles to improve understanding of best practices and responsibilities. Effective training involves different methods depending on the level of insight, knowledge, or awareness needed, with education providing long-term understanding, training imparting intermediate skills, and awareness building short-term knowledge. Role-based and social engineering training help ensure the right training reaches the intended audiences.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 4

    Security is a Shared Responsibility

    Most individuals are not aware of the potential threats and best
    practices

    The End user behaviour counts

    Emphasis on Compliance

    To understand expected responsibilities and acceptable behavior

    Education program should be tailored as per user roles and


    audiences
    NIST SETA Model
    Security Education Training Awareness
    Attribute Why How What

    Level Insight Knowledge Information

    Objective Understanding Skill Awareness

    Teaching Method Discussion, Seminar Lecture, Case Study, Interactive, Video,


    Hands-on posters, games

    Test Measure Essay Problem Solving True / False or MCQ

    Impact Timeframe Long-term Intermediate Short-term


    Role Based Awareness Training
    • Right training for right peoples

    Education Training Awareness

    • Executive users • System admins • End users


    • System Owner • Tech support • Contractors
    • Data Owner
    Social Engineering Training

    Social EngineeringSocial engineering, in the Employees must be trained on :


    context of information security, refers to • How different social engineering attack works
    psychological manipulation of people into • What is the primary symptoms of a social engineering attack
    performing actions or divulging confidential • Recommended actions
    information • Regular testing / contingency exercises

    You might also like