Fighting Phishing

CHAPTER 12How to Do Training Right

Chapter 12 will cover how anyone can create an effective training program and content.

This chapter was mostly written by Dr. John N. Just, Ed.D., the Chief Learning Officer at KnowBe4, Inc., where he leads teams from around the globe that consistently win awards and industry accolades for the best online training in the industry. He has educated millions of learners via eLearning around the world on compliance and security topics. He earned a bachelor's degree from Pennsylvania State University, a master's degree in instructional technology from the University of South Florida, and a doctorate in instructional technology and distance education from Nova Southeastern University. John has helped train tens of millions of people in anti-phishing defenses using online training. It is his area of expertise.

In this chapter we will discuss the three parts of building a security awareness training program:

• Designing an effective security awareness training program
• Building/selecting and reviewing content
• Deploying and maintaining that content

Designing an Effective Security Awareness Training Program

Seven main concepts go into designing and maintaining any training program, including security awareness training programs:

• Set program objectives.
• Get leadership support.
• Form a steering Committee.
• Decide on frequency (i.e., cadence) and amount of time allocated to training.
• Do an audience analysis.
• Make sure you have accessibility.
• Do a regular ...