Technical controls fail when people do not understand their part. A security awareness, education and training program builds that understanding, and the CISSP exam expects you to know the difference between its three levels, the methods that work and how to measure whether the program is changing behavior. It is also one of the most cost-effective controls available, because a well-informed workforce stops many attacks before any technical control is needed.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.