Re: Security Awareness Training Tool(s)

[Kevin Cumberland <KCumberland () CSMD EDU>]

We also use SANS Security The Human Program.
They offer the content in SCORM modules that can then be imported into
your Learning Management System.
The Security Awareness program definitely gives us value as we ensure
all of our employees take awareness training.

We also conduct monthly phishing campaigns to continually educate our
users


Kevin Cumberland
Network Security Administrator
Information Technology Services
College of Southern Maryland
kcumberland () csmd edu
Phone: 301.539.4716


> > > "Cavender, Terry" <terry.l.cavender () VANDERBILT EDU> 10/9/2017 8:55
AM >>>
We implemented SANS’ security awareness training modules.
 
-                Which training program are you using?  All of their
security awareness modules.
-                Are there additional modules available such as PCI
training? HIPAA? FERPA? Etc. Yes
-                Is it/can it be integrated with a Learning Management
System? Unsure.
-                Do you think it provides great value to the userbase
you support? Going through all the modules myself at the moment…so far
pretty pleased.
-                Are you considering switching to something else? Why? 

-                Anything else you’d like to share (e.g. Do you have
regular events promoting awareness? Phishing campaigns? Etc.) We write
articles and have them published in our internal communications.
 
 
 
Best,
_________________________
Terry Cavender CISA, PMP, CCSA, ACE (Palo Alto) | Security Operations |
Information Technology | Vanderbilt University
Oak Leaf Society Ambassador |terry.cavender () vanderbilt edu | phone
615.343.3494 | I do.  Not Try.  Do.
Did you know? VUIT offers help, training, discounts and more
atit.vanderbilt.edu
 
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU]On Behalf Of Martinez, Brian
Sent: Monday, October 9, 2017 6:49 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Security Awareness Training Tool(s)
 
Good morning all,
 
With it being National Cyber Security Awareness Month, this inquiry
I’ve been sitting on seems particularly relevant:
 
We presently have some training tools for general security awareness,
PCI training, and HIPAA training in our primary LMS and have been
contemplating moving to a different platform (the tools, not the LMS).
I’m curious to know what platforms/tools other institutions are using
and whether or not they think it provides great value.
 
Specifically, I guess I’d like to know:
 
-                Which training program are you using?
-                Are there additional modules available such as PCI
training? HIPAA? FERPA? Etc.
-                Is it/can it be integrated with a Learning Management
System?
-                Do you think it provides great value to the userbase
you support?
-                Are you considering switching to something else? Why?
-                Anything else you’d like to share (e.g. Do you have
regular events promoting awareness? Phishing campaigns? Etc.)
 
Please feel free to contact me off list.
 
Thank you!
 
Brian R. Martinez
Information Security 
Michigan State University
Office: +1-517-884-8791
brm () msu edu