Security Awareness Training for a Computer User

Security awareness training protects IT investments.

Security Awareness Training prepares computer users to prevent errors and Information Technology vulnerabilities. Users must understand and comply with security policies and procedures before they can access systems. By keeping software applications updated with the latest firmware and patches, users can better protect information. Awareness training provides instruction on how to set strong passwords, back up data, use anti-virus protection, report violations of security policy and follow rules to deter the spread of spam, viruses or worms.

Features

Security awareness training typically results from a needs assessment which identifies security issues facing an organization. For example, analysis of events (such as attempts to make a computer unavailable, website hacking, hijacking of systems and virus attacks) indicates why certain types of training might be required for certain departments. Security awareness training features supporting posters, brochures, email advisories and daily updates to reinforce key messages regarding IT security.

Types

Security awareness training can be delivered via video, self-paced training or on-site, instructor-led training. Online testing typically assesses student knowledge retention. Many companies designate a specific period to address security issues. Promoting different training alternatives during October, National Cyber Security Month, ensures employees use Internet firewalls, install legitimate anti-virus software and keep software current by using automatic updating.

Function

A successful security awareness training program communicates an IT security policy that reflects business needs and known risks, informs users of their IT security responsibilities and establishes processes for monitoring computer usage. Security awareness instructional presentations focus attention on security so users can recognize IT security concerns and respond effectively.

Content

Topics covered in security awareness training for computer users includes password usage, virus protection, implications of non-compliance to policies, avoiding suspicious email attachments, protecting the environment, inventory control, handheld and laptop device security measures while traveling, software license restrictions, access control issues and individual accountability. By emphasizing the importance of protecting data, training prepares users to adhere to policies and procedures that protect sensitive company data in systems, archived and in email.

Expert Insight

Measuring the success of a security awareness training program involves conducting a follow-up survey to assess if employees received enough training to fulfill their security responsibilities. Making security awareness training a mandatory component of employee development plans ensures that personnel complete required training and pass associated exams, typically on an annual basis.

References

• National Institute of Standards and Technology: "Building an Information Technology Security Awareness and Training Program;" Mark Wilson and Joan Hash

Resources

• Microsoft Online Safety: "Stay Safer Online for National Cyber Security Month"