Security Policies and Implementation Issues, 3rd Edition

Employee Awareness and Training

The goal of employee awareness and training is to ensure that individuals have the knowledge and skills needed to implement the security policies. The primary objective of a security awareness program is to educate users. A well-executed awareness and training program can do much more. Some additional benefits include:

• Reinforcing core organizational values
• Giving management an opportunity to demonstrate support
• Creating opportunities for employees to acquire new skills, leading to increased job satisfaction

Awareness includes teaching employees about policies and core security concepts. Effective security awareness helps drive acceptance. When users understand policies, they can be held accountable for observing ...