Security Awareness Blog: Category - Security Awareness Communications

First Key Metric for Any Security Awareness Program

Last week we discussed how healthcare has been more successful in changing behaviors and measuring that change than we in the security community. Not only has healthcare been working longer on changing behaviors (such as washing hands) but they have more robust metrics for measuring. For security awareness programs, where can we start? I'll be … Continue reading First Key Metric for Any Security Awareness Program


Effective Security Awareness Programs - Think Different

I'm a passionate believer that security awareness can work, that you can change human behavior and improve the security of your organization. Some people in the security community disagree, they feel awareness cannot work. If you look at security awareness programs in the past, I would have to agree. These awareness programs failed to change … Continue reading Effective Security Awareness Programs - Think Different


National Cyber Security Awareness Month - #NCSAM

For those of you living in the United States, you may have noticed recent announcements about National Cyber Security Awareness Month. Sponsored by the Department of Homeland Security and the National Cyber Security Alliance, this is a month long event that happens every October. The goal is to raise awareness ... well about awareness. I'll … Continue reading National Cyber Security Awareness Month - #NCSAM


Executing Your Security Awareness Program: Step 2

In our first post about Executing Your Security Awareness Program we discussed putting together your Steering Committee, a team of 5-7 people to help you develop and improve your awareness program. The second step is identifying who the target is of your awareness program. WHO then determines what content you will teach and how you … Continue reading Executing Your Security Awareness Program: Step 2


Security Awareness Training - Primary Communication

Last week I started a new series in security awareness training on how to communicate your awareness program. Even once you identify the most effective security awareness topics for your organization, you will not have an impact unless you effectively communicate those topics. Last week I broke down security awareness communication into two categories, primary … Continue reading Security Awareness Training - Primary Communication