Re: Security Awareness Training Tool(s)

[Kevin Cumberland <KCumberland () CSMD EDU>]

We use PhishMe also but just for the running phishing campaigns.  It's
great for that as it has a lot of predefined templates for both phishing
and creating awareness newsletters.  We use SANS Securing the Human for
the content that we then import into our LMS.  We have mandated that all
employees complete security awareness training

Kevin Cumberland
Network Security Administrator
Information Technology Services
College of Southern Maryland
kcumberland () csmd edu
Phone: 301.539.4716



> > > Ronald Loneker <rloneker () CSE EDU> 10/19/2017 11:25 AM >>>
Sorry I'm late to seeing this.

Phishme.com offers training with a phishing simulation program that
they charge for. They also do have free training modules for those who
cannot purchase their service - I was able to load them into our Moodle
LMS to create a training course for our faculty and staff, although we
have not mandated the training yet.
Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Henderson Hall, Room 202C
2 Convent Road
Morristown, NJ 07960

Phone: 973-290-4229
( tel:973-290-4229) 

e-mail: rloneker () cse edu


CSE's IT department will never ask for your password, social security
number or other personal information in an e-mail message.

Please do not share any information with others!







On Mon, Oct 9, 2017 at 7:49 AM, Martinez, Brian <brm () msu edu> wrote:


Good morning all,
 
With it being National Cyber Security Awareness Month, this inquiry
I’ve been sitting on seems particularly relevant:
 
We presently have some training tools for general security awareness,
PCI training, and HIPAA training in our primary LMS and have been
contemplating moving to a different platform (the tools, not the LMS).
I’m curious to know what platforms/tools other institutions are using
and whether or not they think it provides great value.
 
Specifically, I guess I’d like to know:
 
Which training program are you using?
Are there additional modules available such as PCI training? HIPAA?
FERPA? Etc.
Is it/can it be integrated with a Learning Management System?
Do you think it provides great value to the userbase you support?
Are you considering switching to something else? Why?
Anything else you’d like to share (e.g. Do you have regular events
promoting awareness? Phishing campaigns? Etc.)
 
Please feel free to contact me off list.
 
Thank you!
 
Brian R. Martinez
Information Security 
Michigan State University
Office: +1-517-884-8791
( tel:(517)%20884-8791) 
brm () msu edu