Archive for the ‘Training & awareness’ Category

Great InfoSec and Privacy Info and Resources This Week On Twitter

Friday, June 5th, 2009

I got my week’s issue of Time magazine in the mail today, and lo-and-behold the cover and feature story was about Twitter!

(more…)

Not Providing Training and Awareness Is The Dumbest Idea For Information Security

Thursday, June 4th, 2009

As time goes on, and more and more information security incidents and privacy breaches occur, I continue to hear otherwise smart people say silly and completely wrong statements about the need (or lack of) for information security and privacy training and awareness!

(more…)

Common InfoSec & Privacy Training Mistakes

Monday, June 1st, 2009

I’ve been reviewing some of the information security and privacy training and awareness content for some organizations; some large and some small. Most of the training is ineffective…

(more…)

Insider Threat: Horrible Tragedy Highlights Need For Policies & Training

Wednesday, May 27th, 2009

I got the June 1 issue of Newsweek today, and something that’s bothered me ever since I first heard about it was on page 4…

(more…)

HIPAA, HITECH Act and Disposal Problems

Thursday, May 21st, 2009

Here’s yet another incident that provides very good lessons that could be incorporated into information security and privacy training sessions as a case study, particularly for HIPAA compliance as well as secure disposal training…

(more…)

The World’s Largest (and BEST!) Cyber Defense Competition for Teens…In Ames Iowa!

Wednesday, May 20th, 2009

Last month Iowa State University, in Ames, held a unique type of IT Olympics for teens…

(more…)

Effectively Explaining the Purpose of Information Classification to Employees

Tuesday, May 19th, 2009

The topic for my Q2 2009 issue of Protecting Information was helping employees to understand why different types of information need different levels of security. Yes, this is information classification, but I describe it in a way that employees of all levels and responsibilities throughout an organization can understand, here’s how…

(more…)

Secure360 Starts Tomorrow!

Monday, May 11th, 2009

I drove up to St. Paul, MN, today and will be speaking, and look forward to attending the sessions, at Secure360.

(more…)

Regulatory Requirements for Training and Awareness

Thursday, May 7th, 2009

Today I had a great conversation with a CISO about the regulatory and legal requirements for organizations to provide information security and privacy training and awareness activities…

(more…)

Understanding Data Protection from 4 Critical Perspectives

Tuesday, May 5th, 2009

Today I gave a webcast (27 minutes) about “Understanding Data Protection from 4 Critical Perspectives” and it is now available online through this link

(more…)