RE: Security Awareness Budget

["Gary Hill" <gary.hill.francis () gmail com>]

Hi,

> From my past experience the budget could be from as low as 0.5 $ to
over 250$ per user, depending from requirements and from desired
results of the security awareness campaign. The second year usually
costs from 10% to 33% of the first year, or more as there are no
rules. That was my information when I have studied all the major
suppliers in this field 18 months ago.

Personally I learned how to do security awareness for "free". I google
the security incidents in most important magazines and send them as a
reminder to all employees in a powerpoint presentation. If you have
the appropriate e-learning solution you can simply integrate the
presentation into it and prepare some questions to measure the effect.

Few times I bought a couple of inexpensive presentations from
infosecuritylab.com site - buy.infosecuritylab.com, and combined them
into a training program that was suitable for our organisation,
because they have some great graphical material about information
security and some posters I also use in our public places (toilets,
cafeteria etc).

Nevertheless, keep in mind that there are over 250 companies that
could help you with the desired security awareness programme, but you
need to simply google them and also make your requirements very clear
and ask for a competitive price.

Best,

GHF, CISO











From: listbounce () securityfocus com [

mailto:listbounce () securityfocus com ] On Behalf Of Monkey.Hair () yahoo com
Sent: Wednesday, September 12, 2007 7:31 AM

To: security-basics () securityfocus com

Subject: Security Awareness Budget

I'd like to estimate the budget for a security awareness program for a
worldwide company with about 80.000 employees. If your company is
about

the same size and you have already launched a security awareness and
training campaign, would you please tell me how much it costed you the
first year and how much it now costs you per year?

Thank you very much for your help