Information Security Awareness Program
Information Security is like a chain, as strong as the weakest link. More than 80% information security problems are human problems, hence Information Security must be extended beyond the technology. Improving people awareness as the weakest link has been forgotten by many organizations.
Nowadays, security threats in digital life are not only for big organizations. The threats exists in anywhere for everyone. Friends, family and children can be a victim just because they are not aware of the risks of cellular phone, digital camera, chatting, e-banking,SMS, etc.
The goals of an information security awareness program are to make company personnel aware of:
-
The business, legal and regulatory liabilities involved in not securing their information
Specific threats and the associated risks to that information
The benefits of good security measures to them and to the organization
Their responsibilities in protecting the information
Security Awareness Program is one of the key elements in organization’s information security program. Security Awareness provides regular employees’ training on corporate information security policies, procedures, standards and current information security legislation.