Chapter 6

Question 1

What’s the “SETA Program”?

Answer 1

It is an awareness program for reducing accidental security breaches by members of the organization.

Question 2

What are 3 benefits of “SETA Programs”?

Answer 2

-Improve employee behavior.

-Inform members about where to report policy violations.

-Ability to hold employees accountable for their actions.

Question 3

How does SETA enhance security? List 3

Answer 3

-Building knowledge to design or use security programs.

-Building knowledge to use IT systems securely.

-Increase awareness of the need for InfoSec.

Question 4

What’s “Security Training”?

Answer 4

Outsourced training that provides information and hands-on instructions so members can work more securely.

Question 5

Name and explain the 2 ways for customizing training for users?

Answer 5

1- functional background:
*general.
*managerial.
*technical.

2- Skill level:
*basic.
*intermediate.
*advanced.

Question 6

Is training done for one or few individuals, rather than large groups?

Answer 6

Yes, because waiting for large groups can cost productivity.

Question 7

What are “Security awareness programs” and their affects?

Answer 7

• They make members understand the importance of security.
• Reminds user of procedures to be followed.

Question 8

Name 3 things to do when developing an awareness program:

Answer 8

• Less technical wording.
• Keep things light.
• Plan and document everything.

Question 9

What is some advice for InfoSec awareness programs:
3 points:

Answer 9

• Speak in a way they can understand.
• They can’t learn what they don’t understand.
• Tell the students what you plan to tell them, then tell it to them, then remind them of what you told them.

Question 10

Security training may be undermined if…

Answer 10

management does not set a good example.

Question 11

Name 3 possible security components:

Answer 11

• Videos.
• Posters.
• Lectures and training.

Question 12

Name 3 types of trinkets:

Answer 12

• Hats.
• Shirts.
• Mugs.