Chapter 29 – |
Security Awareness |
K Rudolph
Gale Warshawsky
Louis Numkin
Chapter Contents:
|
29.1 |
|
Awareness as a Survival Technique
|
|
29.2 |
|
Critical Success Factors
|
|
29.2.1 |
|
In Place Information Security Policy
|
|
29.2.2 |
|
Senior Level Management Support
|
|
29.2.2.1 |
|
Budget
|
|
29.2.2.2 |
|
Example
|
|
29.2.2.3 |
|
Security Staff Backing
|
|
29.2.3 |
|
Information Security Is a People Problem
|
|
29.2.4 |
|
Goals. "Sighted sub. Sank same." - David Francis Miller, U.S. Navy Pilot, Radio Message, February 26, 1942
|
|
29.2.5 |
|
Audience Profiles
|
|
29.2.6 |
|
The Art of Motivation
|
|
29.3 |
|
Approach
|
|
29.3.1 |
|
Media Campaign
|
|
29.3.2 |
|
Is a Plan Necessary?
|
|
29.4 |
|
Awareness Principles
|
|
29.4.1 |
|
Attention Getting
|
|
29.4.2 |
|
Appeal to Target Audience
|
|
29.4.3. |
|
Basic: Keep It Simple and Memorable
|
|
29.4.4 |
|
Buy-In Is Better than Coercion
|
|
29.4.5 |
|
Current
|
|
29.4.6 |
|
Credible
|
|
29.4.7 |
|
Continuing
|
|
29.5 |
|
Content
|
|
29.5.1 |
|
Risks
|
|
29.5.2 |
|
Basic Countermeasures
|
|
29.5.3 |
|
Responsibilities
|
|
29.5.4 |
|
Contact Information
|
|
29.6 |
|
Techniques
|
|
29.6.1 |
|
Start with a Bang
|
|
29.6.2 |
|
Use Logos, Themes, and Images
|
|
29.6.3 |
|
Use Stories and Examples
|
|
29.6.4 |
|
Use Failure
|
|
29.6.5 |
|
Ask Questions and Involve the Audience
|
|
29.6.6 |
|
Be Surprising
|
|
29.6.7 |
|
User Acknowledgment and Sign-off
|
|
29.6.8 |
|
Use Analogies
|
|
29.6.9 |
|
Humor
|
|
29.6.10 |
|
Address Personality and Learning Styles
|
|
29.6.11 |
|
Take Advantage of Circumstances
|
|
29.7 |
|
Tools
|
|
29.7.1 |
|
Intranet and/or Internet
|
|
29.7.2 |
|
Screen Savers
|
|
29.7.3 |
|
Sign-on Screen Messages
|
|
29.7.4 |
|
Posters
|
|
29.7.5 |
|
Videos
|
|
29.7.6 |
|
Trinkets and Giveaways
|
|
29.7.7 |
|
Publications
|
|
29.7.8 |
|
Surveys, Suggestion Programs, and Contests with Prizes and Awards
|
|
29.7.9 |
|
Inspections and Audits
|
|
29.7.10 |
|
Events, Conferences, Briefings, and Presentations
|
|
29.8 |
|
Measurement and Evaluation
|
|
29.8.1 |
|
Audience Satisfaction
|
|
29.8.2 |
|
Learning or Teaching Effectiveness
|
|
29.8.3 |
|
Skill Transfer or Audience Performance
|
|
29.9 |
|
Resources
|
|
29.10 |
|
Notes
|
|
|
|