Security Awareness

Question 1

Security policy training and procedures - Security Awareness

Answer 1

• All of your policy information is on the Intranet
• Consider in-person mandatory training sessions
• General security best practices
• Specific security training

Question 2

Network policies - Security Awareness

Answer 2

• Each organization has their own philosophy
• Closely associated with the security policy
• Acceptable use policy
• All-encompassing and specific set of rules for network use
• May require a signature before getting network access

Question 3

Principle of least privilege - Security Awareness

Answer 3

• You only get the rights necessary to perform the job
• Management gets to choose the rights, IT administers it
• Physical and digital controls - Business processes, permissions