Freshly Printed - allow 10 days lead
Building an Information Security Awareness Program
Defending Against Social Engineering and Technical Threats
A practical guide to implementing Information Security Awareness Training in your organization
Bill Gardner (Author), Valerie Thomas (Author)
9780124199675, Elsevier Science
Paperback, published 12 August 2014
214 pages, 30 illustrations
23.5 x 19 x 1.5 cm, 0.45 kg
"...a blueprint for creating a highly practical and effectiveness awareness programme that could do so much more to protect your organisation than tens of thousand of dollars spent on shiny new security hardware." --Network Security "...a comprehensive introduction to the human factors that have an impact on the delivery of effective security, as well as practical proposals for the defense against social engineering and technical threats." --Computing Reviews
The best defense against the increasing threat of social engineering attacks is Security Awareness Training to warn your organization's staff of the risk and educate them on how to protect your organization's data. Social engineering is not a new tactic, but Building an Security Awareness Program is the first book that shows you how to build a successful security awareness training program from the ground up. Building an Security Awareness Program provides you with a sound technical basis for developing a new training program. The book also tells you the best ways to garner management support for implementing the program. Author Bill Gardner is one of the founding members of the Security Awareness Training Framework. Here, he walks you through the process of developing an engaging and successful training program for your organization that will help you and your staff defend your systems, networks, mobile devices, and data. Forewords written by Dave Kennedy and Kevin Mitnick!
1. What Is Security Awareness Training? 2. Why Does Your Organization Need a Security Awareness Program? 3. Getting Management Buy-In 4. Understanding Infosec Threats 5. Training Cycle 6. Training Types 7. Building Engaging Training 8. Metrics 9. Why Most Security Awareness Programs Fail 10. Current Debate on Security Awareness 11. The Security Awareness Training Framework (SATF)
Subject Areas: Computer security [UR]