People are both a common path for attacks and a strong layer of defense. Phishing, pretexting phone calls, business email compromise and simple mistakes such as sending a file to the wrong person all depend on human behavior. Awareness and training programs aim to change that behavior so employees act securely in their daily work: recognizing suspicious messages, protecting data, following procedures and reporting problems quickly. For the information security manager, the program is a control like any other, with objectives, owners and measures.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.