Building and Managing an Information Security Awareness and Training Program: A Practical Approach for Defending Against Emerging Security Threats and Social Engineering

This book is for anyone building an information security awareness and training program. The book involves a great game plan for security awareness and training for the sake of information security and to meet regulatory compliance. You can use this book as a quick reference guide. When tasked with developing and improving upon an already existing security awareness program, you can employ many strategies right from this book. The concept of measuring the security awareness and training program's effectiveness is intertwined in this book. Being able to prove the effectiveness of an information security awareness and training program is vital in the best of times, but as budgets diminish, metrics become utterly critical. Information Security Awareness and training are too often transferred to security specialists who typically do not understand how to develop or manage a program for training users effectively. Regarded as just another policy or regulatory mandate that needs to be checked off, it's tasked to an already overburdened security professional. No surprise that a generic program with no relevance to the organization or the employee's role often develops. However, given today's budget limitations and other demands, it's not always likely to develop an awareness program customized to your organization and its specific users and needs. Nevertheless, responsible organizations still need to perform due diligence to evaluate the most appropriate options and deliver the best program possible. If you are committed to this goal, there is no better resource than using this book. Read more