Security Awareness Blog

Remotely Attend Two Day Course on Building High-Impact Awareness Programs

Looking to build a new security awareness program that makes a difference? Want to pump up the volume on an existing program and go from just compliance focused to changing behaviors and reducing risk? I'll be teaching SANS two day course MGT 433 "Building a High-Impact Security Awareness Program" on 8/9 March in Orlando, Florida. … Continue reading Remotely Attend Two Day Course on Building High-Impact Awareness Programs


Two New Awareness Posters - For Developers and Utilities

We released two new awareness posters for the community. Neither poster will solve world hunger, but they may be a handy reference for your organization. NERC CIP Mapping to Critical Security Controls: This poster identifies all the different NERC CIP Reliability Standards (versions 3, 4 and 5) and maps them against the Critical Security Controls. … Continue reading Two New Awareness Posters - For Developers and Utilities


Awareness Newsletters, Posters, and Blog Posts - Lame?

A common misconception I run into with awareness materials is they cannot change behaviors. For example, posters. We released a new security awareness poster called "You Are A Target", which explains to Ordinary Computers Users why they are a target and identifies all the different ways criminals can make money off of you. This is … Continue reading Awareness Newsletters, Posters, and Blog Posts - Lame?


Two New Security Awareness Programs

At SANS Securing The Human our goal is to provide the most effective awareness training possible. As we work with hundreds of organizations around the world we are seeing a growing need for more specialized awareness training. While we continue to provide a foundation for end users and numerous compliance standards, we have added two … Continue reading Two New Security Awareness Programs


*sigh* - Example of Really BAD Security Awareness

Security awareness is tough. So I get frustrated when I see really bad advice published. I even get more frustrated when people know they are publishing bad advice, but continue anyways because they care about marketing, not providing value. An infographic was published on passwords, specifically "Duh, The Easiest Way to Stop Hackers is … Continue reading *sigh* - Example of Really BAD Security Awareness