Elements of an Information Security Awareness Program
Download as PPT, PDF0 likes738 views
The document discusses security awareness and types of risk. It notes that virtual risks are difficult to prove and experts may disagree on them. The document recommends making top 10 lists as a way to raise awareness of security issues at the Department of Homeland Security, including having a mascot, dressing up, executive briefings, computer security days with comics and cards, publishing, continually reinventing messaging, getting others involved, and having fun.
Elements of an Information Security Awareness Program
- 2. The Challenge of Security Awareness Why? Nobody cares about Security… And how do we get their attention and support?
- 3. Types of Risk Prof. John Adams, University College London UK risk expert Direct – directly perceived – obvious Scientific – determined via science Virtual Risk – everything else!
- 4. Types of Risk Virtual Risk What we are all involved in! Project risk/Operational risk Physical/Data security risk Terrorism/Homeland Security Weather
- 5. Virtual Risk Virtual Risk Difficult to “prove” Experts don’t know or do not agree We don’t know what we don’t know
- 6. Issues Security viewed as a negative Avoidance v. “risk” Delays Cost Extra work “ Gotchas”
- 7. 10. Make Top 10 lists! Top 10 The Top 10 things we do for Security Awareness at DHS…
- 9. 10. Make Top 10 lists! Top 10 The Top 10 things we do for Security Awareness at DHS… 9. Have a Mascot
- 11. 10. Make Top 10 lists! Top 10 The Top 10 things we do for Security Awareness at DHS… 9. Have a Mascot 8. Dress Up
- 13. 10. Make Top 10 lists! Top 10 The Top 10 things we do for Security Awareness at DHS… 9. Have a Mascot 8. Dress Up 7. 1-on-1 Executive Briefings
- 14. 10. Make Top 10 lists! Top 10 The Top 10 things we do for Security Awareness at DHS… 9. Have a Mascot 8. Dress Up 7. 1-on-1 Executive Briefings 6. The Screensaver
- 15. Top 10 The Top 10 things we do for Security Awareness at DHS… 5. Computer Security Day – comics and greeting cards
- 17. Top 10 The Top 10 things we do for Security Awareness at DHS… 5. Computer Security Day 4. Publish or Perish
- 19. Top 10 The Top 10 things we do for Security Awareness at DHS… 5. Computer Security Day 4. Publish or Perish 3. Continually reinvent
- 20. Top 10 The Top 10 things we do for Security Awareness at DHS… 5. Computer Security Day 4. Publish or Perish 3. Continually reinvent 2. Get others to play
- 21. Top 10 The Top 10 things we do for Security Awareness at DHS… 5. Computer Security Day 4. Publish or Perish 3. Continually reinvent 2. Get others to play 1. Have Fun!