Guest
Importance of the security issues
To permeate in the organization the importance of the security issues, which is the best way, you recommend, to train/instruct/evangelize the subject?
Assign topic to the user
Expert
Rhand Leal
Jan 06, 2021
Please note that there is no single answer to this question because you have different publics with different interests:
- Top management needs to make decisions over issues that many times are not so clear for them, and they do not need deep knowledge about technicalities of security issues (they will be more concerned about how it impacts the business). In these cases, evangelization is a good approach
- technical personnel with operational responsibilities for security needs deep knowledge over technologies, methodologies, and process, so education and training will get you better results
- overall personnel needs a basic understanding of security, to properly identify, report, and react to risky situations. In these cases, awareness and basic instruction would be enough
These articles will provide you a further explanation about awareness in the organization:
- What are the benefits of security awareness training for organizations? https://advisera.com/27001academy/blog/2019/03/27/what-are-the-benefits-of-security-awareness-training-for-organizations/
- 8 Security Practices to Use in Your Employee Training and Awareness Program https://advisera.com/27001academy/blog/2015/03/02/8-security-practices-to-use-in-your-employee-training-and-awareness-program/
- How to perform training & awareness for ISO 27001 and ISO 22301 https://advisera.com/27001academy/blog/2014/05/19/how-to-perform-training-awareness-for-iso-27001-and-iso-22301/
- Top management perspective of information security implementation https://advisera.com/27001academy/blog/2012/12/04/top-management-perspective-of-information-security-implementation/
These materials will also help you regarding the awareness in the organization:
- Book ISO 27001 Risk Management in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/
- ISO 27001 Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/
- Free Security Awareness Training: https://advisera.com/training/awareness-session/security-awareness-training/ - this is a series of 25 videos that cover various topics related to security.
Comment as guest or Sign in
Jan 06, 2021
Jan 06, 2021
Jan 06, 2021