Information Assurance Handbook: Effective Computer Security and Risk Management Strategies

CHAPTER 17

Information Assurance Awareness, Training, and Education (AT&E)

Organizations invest millions to secure their systems as new threats and information risks emerge. Most fail to realize a common “weakest link” in securing systems and networks is the human, especially an organization’s employees. Frequently, employees do not understand their role in the information assurance plan. They do not see the big picture described in Chapter 2. They see only parts and do not see how they fit into cybersecurity, information protection, information security, and finally information assurance. This lack of awareness means employees do not effectively apply appropriate countermeasures from the MSR model. Some examples of information assurance risks ...