
Aetna’s Advertising Design department and distributed throughout
the organization.
■
An InfoSec exam provides security training and testing for all
users on an annual basis.
Since its inception in 1999, Aetna’s information security awareness
program has received professional recognition. In 2000, the SANS Insti-
tute identified it as “the model” for other organizations to emulate. It
also received the Information Security Program of the Year award in
2002 from the Computer Security Institute.
5
The program’s champion
is Donna Richmond, who is responsible for Security Awareness and Edu-
cation in the Information Security Policy and Practices group.
InfoSec ...