Information Security Fundamentals, 2nd Edition

48  ◾  Information Security Fundamentals

what the FRAAP is, how it works, and how it will help the business people meet

their specific objectives.

To be successful, the awareness program should take into account the needs and

current levels of training and understanding of the employees and management.

ere are five keys to establishing an effective awareness program. ese include

◾ Assess current level of risk assessment understanding

◾ Determine what the managers and employees want to learn

◾ Examine the level of receptiveness to the security program

◾ Map out how to gain acceptance

◾ Identify possible allies

To assess the current level of risk assessment understanding, it will be necessary

to ask questions of the audience. Although some emplo ...