Educause Security Discussion mailing list archives
Re: New Employee Security Training
From: James Valente <jvalente () SALEMSTATE EDU>
Date: Fri, 16 Jun 2017 19:41:04 +0000
We do. Security does the training (it's organized by HR as part of an "orientation" and we get 30 minutes for this PowerPoint + questions). I do about 80% of them and our CISO does the rest. The training is usually done on the first Tuesday of the following month (or 2 months if there aren't enough hires to warrant a session) from the hire date. Right now it only covers administrative staff (not Faculty), which is unfortunate since Faculty tends to be a huge part of the population that gets phished and/or infected-though that may be because they don't get the training. I am working with HR to get some sort of faculty training in place. I'd say it works pretty well as a majority of the people who I see reporting things to us are ones I remember from this training (or departments who request the training for all). Additionally, I don't usually see people that have sat through the training pop up on any notifications for malware or being victims of a successful phish. Unfortunately I don't have stats prepared to show this. Thanks, James Valente Associate Director of Information Security Salem State University 978.542.2739 GPG Fingerprint: B086 58B5 DE53 328A 210D 5F3D BF20 1E0A 813A EDD1 From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas Carter Sent: Friday, 16 June, 2017 15:33 To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] New Employee Security Training Does anyone do IT security training as part of on-boarding new employees? If so, what do you cover? Who does the training (IT, HR, or?)? When is the training done? How well does it seem to work for you? What would you do differently? We would like to implement something like this, but are afraid of overwhelming a new employee during their HR orientation. Something done a week or two later may have a better chance of sticking with the end user, but requires much more time and organization on our part. Thomas Carter Network & Operations Manager / IT Austin College 900 North Grand Avenue Sherman, TX 75090 Phone: 903-813-2564 <http://www.austincollege.edu/> www.austincollege.edu
Attachment:
smime.p7s
Description:
Current thread:
- New Employee Security Training Thomas Carter (Jun 16)
- Re: New Employee Security Training James Valente (Jun 16)
- Re: New Employee Security Training Ullman, Catherine (Jun 16)
- Re: New Employee Security Training Hart, Michael (Jun 16)
- Re: New Employee Security Training Carroll, Tim (Jun 19)
- Re: New Employee Security Training Ludwig, Linda (Jun 19)
- Re: New Employee Security Training Lovaas,Steven (Jun 19)
- Re: New Employee Security Training Telfer, Will (Jun 19)
- Re: New Employee Security Training Riemer, Stan (Jun 19)
- Re: New Employee Security Training Dan Lewis (Jun 20)
- Re: New Employee Security Training Johnson, Kyle A (Jun 20)
- Re: New Employee Security Training Lovaas,Steven (Jun 19)
- <Possible follow-ups>
- Re: New Employee Security Training Hudson, Edward (Jun 16)