computersecurityhandbook.com
Home  >  Fourth Edition  >  Chapter 29
Chapter 29 –  Security Awareness
     K Rudolph
     Gale Warshawsky
     Louis Numkin

Chapter Contents:

   29.1    Awareness as a Survival Technique
   29.2    Critical Success Factors
   29.2.1    In Place Information Security Policy
   29.2.2    Senior Level Management Support
   29.2.2.1    Budget
   29.2.2.2    Example
   29.2.2.3    Security Staff Backing
   29.2.3    Information Security Is a People Problem
   29.2.4    Goals. "Sighted sub. Sank same." - David Francis Miller, U.S. Navy Pilot, Radio Message, February 26, 1942
   29.2.5    Audience Profiles
   29.2.6    The Art of Motivation
   29.3    Approach
   29.3.1    Media Campaign
   29.3.2    Is a Plan Necessary?
   29.4    Awareness Principles
   29.4.1    Attention Getting
   29.4.2    Appeal to Target Audience
   29.4.3.    Basic: Keep It Simple and Memorable
   29.4.4    Buy-In Is Better than Coercion
   29.4.5    Current
   29.4.6    Credible
   29.4.7    Continuing
   29.5    Content
   29.5.1    Risks
   29.5.2    Basic Countermeasures
   29.5.3    Responsibilities
   29.5.4    Contact Information
   29.6    Techniques
   29.6.1    Start with a Bang
   29.6.2    Use Logos, Themes, and Images
   29.6.3    Use Stories and Examples
   29.6.4    Use Failure
   29.6.5    Ask Questions and Involve the Audience
   29.6.6    Be Surprising
   29.6.7    User Acknowledgment and Sign-off
   29.6.8    Use Analogies
   29.6.9    Humor
   29.6.10    Address Personality and Learning Styles
   29.6.11    Take Advantage of Circumstances
   29.7    Tools
   29.7.1    Intranet and/or Internet
   29.7.2    Screen Savers
   29.7.3    Sign-on Screen Messages
   29.7.4    Posters
   29.7.5    Videos
   29.7.6    Trinkets and Giveaways
   29.7.7    Publications
   29.7.8    Surveys, Suggestion Programs, and Contests with Prizes and Awards
   29.7.9    Inspections and Audits
   29.7.10    Events, Conferences, Briefings, and Presentations
   29.8    Measurement and Evaluation
   29.8.1    Audience Satisfaction
   29.8.2    Learning or Teaching Effectiveness
   29.8.3    Skill Transfer or Audience Performance
   29.9    Resources
   29.10    Notes

Please report problems to the webmaster at: webmaster@removethis.rlgsc.com
copyright 2002-2006, Robert Gezelter, All Rights Reserved