O'Reilly logo

The CISA® Prep Guide: Mastering the Certified Information Systems Auditor Exam by John Kramer

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

4.7. Evaluating Security Awareness

Evaluating security awareness involves understanding what the educational requirements are according to a policy and other sources, assessing the delivery mechanisms designed to carry messages to the users, reviewing the tracking and monitoring of the message delivery to ensure that it is being performed, and measuring the effectiveness and feedback processes used to reinvent the process throughout a continual life cycle.

Knowing what the message is that needs to get across to the users will be a two-phase effort. First, you will want to assess what existing policies and regulatory requirements exist that require user participation in order to achieve compliance. This will include basic computer workstation behavior expectations, the identification of different security classes related to data (in all forms), and how the user is expected to treat each data class when they come across it in their daily business routines. This portion of the review should supply you with a comprehensive list of do's and don'ts for users to be educated about. Next, you will want to see a process that divides this data up for the appropriate classes of users so that the message is relevant and particular to each type of user's needs. Here again, you must make a judgment call, but some of the extremely technical detail will not be useful or interesting to average users. In addition, the executive user base may need a different message than the janitorial support staff. ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required