10: 7 Security Awareness and Training

Question 1

Security Training

Answer 1

Provides users with knowledge they need to protect the org’s security

Question 2

Security Awareness

Answer 2

Keeps the lessons learned during security training top of mind for employees

Question 3

Security Training Methods

Answer 3

On-site classes, integration with orientations, education through online providers

Question 4

Diversity of training techniques

Answer 4

Gamification, phishing simulations, capture the flag

Question 5

Customized training

Answer 5

Based upon user roles and their role requirements

Question 6

Training Frequency

Answer 6

Balancing time and job responsibilities - can use initial training and major updates with awareness campaigns

Question 7

Password training

Answer 7

Secure password practices should be included in training

Question 8

Data handling procedures

Answer 8

Policies for handling and destroying data should be included in training

Question 9

Acceptable Use Policy

Answer 9

Remind users of organization’s rules and actions it’ll take if the policy is violated