Information Security Handbook

Key components of an effective training and awareness program

An effective training and awareness program is necessary to ensure successful implementation of your information security program. A training and awareness program will be the primary mechanism used to communicate organizational user roles and responsibilities from an information security perspective:

• Secondary media products:
  • This includes things like giveaways (squeezy balls), alert notifications, posters, or social media.
  • These serve to remind users about information security principles that you are communicating through other mechanisms.
  • The key here is to keep information brief and manageable. If you need to read for more than ten seconds, it is too long.
• Primary media ...