Awareness & Training
InfoSecure has developed Awareness & Training Programmes for:
Introduction
Information and employees are key assets within an organisation and it is important to establish systems and procedures to protect both. Increasingly, organisations and their information systems and networks must face security threats from a range of sources. Security incidents often happen for a number of reasons such as lack of understanding of or out of date procedures, poor communication of security policies to employees not to mention occasional bouts of carelessness by the organisation's own employees.
Programme
The goal of InfoSecure's Awareness & Training Programme is to enhance employees' knowledge of a designated (security) awareness subject, with a view to changing attitudes and improving behaviour. All our programmes are designed to meet the needs of organisations, and are supported by a number of practical tools.
The best way to prevent all of this is for everybody to know what to do and how to react at critical moments. All employees must ensure that the organisation's information is adequately protected at all times. The organisation must establish a security awareness culture, within which each employee must keep himself informed of the many threats that can endanger the confidentiality, integrity and availability of its most critical information.
InfoSecure's Awareness & Training Solutions will help organisations to raise the level of awareness and create such a security awareness culture. Train yourself and your people to be aware.
Film clips + Training Material + Excercises & Dilemma's + Self-testing
InfoSecure is the market leader for Awareness & Training Programmes. InfoSecure not only delivers a very attractive programme for clients but also a very effective one. The success of the programme can partly be accredited to use of audio-visual content including film clips.
The design of our Awareness & Training Programme is unique in that the content is a combination of business film clips that are used as eye openers, learning material (eLearning), excercises & dilemma's and self-testing (with management reporting). We have used audio-visual content in all of our programmes for almost a decade now and our experience is that, even a 5 minute programme needs a short film to illustrate the risk and make the programme more interesting for the users.
InfoSecure knows exactly what catches the users' eye and what has the most impact. The use of business film clips, supporting learning material and comprehension testing makes it an attractive and effective combination. Recent studies of the success rate of awareness programmes conclude that the use of these different media approaches is required for effective awareness training.
Three Product Lines
InfoSecure offers both introduction and ongoing training. The first programme implemented is the Introduction Programme (20-45 minutes) for all staff and management in workshop or eLearning.
Thereafter Special Topics Programmes (10-15 minutes) or Quick Learning Programmes (3-5 minutes) are rolled out on a regular basis to ensure ongoing training. The material is selected from our extensive modular training material with currently 20 STPs and around 80 QLPs available.”
Modular Approach
InfoSecure's Awareness training is based on a modular concept and varies according to the needs of the target group. Targeted Information Security Awareness Training implies designing and building programmes to meet the needs of different groups of users that have access rights and privileges to the organisation’s information. For example, an office based user would not need the same Awareness Training as a mobile user; likewise, users with access to business-sensitive information will need more extensive training within the disciplines of Integrity and Business Conduct & Ethics, than perhaps those working on the production floor, who may need significant training around equipment and physical security. The modular targeted awareness concept is illustrated below.
The content of InfoSecure's Awareness & Training Programme is adapted to meet the needs of each target group and can be fully customised to meet the client's requirements. The programme starts with an Introduction Programme used in combination with InfoSecure deliverables comprising 6 targeted film clips, learning material, self-test questions and the Measuring Tool ». All deliverables correspond to the client's selected Golden Rules & Best practices », and together they create a complete and comprehensive programme. The Golden Rules and Best Practices form the core of the programme and are, in fact, the key points to improving employee behaviour by showing ‘good’ versus ‘bad’ practices.
Subsequently or in parallel, other InfoSecure Solutions from the Awareness & Training Programme, such as Special Topic Programmes and Quick Learning Programmess, can be targeted at different user groups with all content customised and containing training material directly related to their business functions and geographic location.
Solutions
The available Solutions from InfoSecure's Awareness & Training Programme are:
Different groups of users will have varying levels of knowledge as well as specific needs for Information Security Awareness. Therefore, organisations need to deliver the correct training to each user group, so that staff apply consistent best practice standards as part of their daily activities.
Editions
The Awareness Programme can be implemented in the organisation in different forms:
- ELearning programmes » (Computer Based Training) to support individual learning.
- Workshops » for general and specific target groups, such as senior management, line management and staff.
- For specific target groups »; such as new employees, ICT staff », users of classified or sensitive information and teleworkers.
- For specific areas of activity; such as research and development, call centres, human resource departments, finance departments.
Customisation
We will work very closely with our clients to ensure that they have the programme that meets their requirements. All InfoSecure Solutions are template-based and designed in a way that enables them to be adapted to address those activities that are most important to the client.
For example:
- The use of brands, language and layout can be applied to all solutions and tools that are available in generic InfoSecure form.
- The organisation's look and feel can be integrated to make the solutions and tools more recognisable by and acceptable to employees.
- Content and layout of solutions and tools can be changed. Two types of content alteration are regularly delivered:
- solutions that are specifically adapted to market segments
- solutions that are tailored to meet the client's requirements
InfoSecure offers excellent standard solutions and tools, but is also happy to contribute ideas to optimise specific customer service.
Language versions
InfoSecure's worldwide clientele means that the Awareness & Training Programme for information security has been implemented in more than 90 countries and is available in 28 different language versions ».
Every Awareness & Training Programme can be fully customised to meet client requirements. The programme can also be adapted to specific business situations.
Toolkit
InfoSecure supplies a Toolkit comprising our best practices and expertise based on the experience that we have gained from introducing & rolling out Awareness & Training Programmes to over 90 organisations since 1999. Many of our clients have international operations and typically order their programmes in 6-7 languages.
The contents of the toolkits are customised to meet the organisation’s specific requirements and contain 15 different sections. Each section in the toolkit has ready-to-use presentations, action plans, articles and letters, all of which also can be adapted. The workshop programme (optional) includes a digital version of the toolkit which will be supplied on a CD-ROM with Navigation tool. The films will be supplied in Windows media files format on CD-ROM.
The InfoSecure Programme Manager’s toolkit contains 15 sections and is used by the local project managers to support the rollout of the programme in their organisations. A 7-section version is made available for the trainer.
Other Services & Solutions
|
