Secure Software Systems

Training the Organization to Be Secure

One of the key means to influence the security culture of an organization is through training. Not just any training though, but the right training given at the right time. To be effective, training must be designed and built with the specific needs of the people who will receive the training and must be delivered when it can be most effective, in a manner that is most effective for them. Because people in an organization have different roles and responsibilities for security, each person needs a training program tailored to those roles and responsibilities. Too much training in the wrong areas and at the wrong times can be just as damaging to security as too little training. The principle is to provide ...