Re: key topics to include in security awareness training materials

[David Seidl <dseidl () ND EDU>]

Tim,

We're a couple of years into our security awareness program. We do a combination of online training required for new 
employees and incoming students, posters, table tents in our dining areas, postcards, and ads in our student newspaper.

We have an extensive site behind our entire infosec program: http://secure.nd.edu

Our current design is part of our switch to a new secure wireless network. Each time we send out a flyer with a theme, 
then will send out postcards and email to support that theme. Every year we do two surveys assessing our impact - we 
look for two touch communication, as well as general uptake of our communications efforts.

Past themes have included:

"Is your computer secure?" - AV and anti-malware, updates, screen lock, and password security
"Why Information Security?" - explaining why we have an obligation to secure data and systems
"Is it Secure?" - our information security program kickoff
"2008 New Years Resolutions" - password sharing, paper records disposal, spyware/AV, and updates.

We've had a lot of success with our program thus far, with significant growth in awareness per our survey results.

David
-----------------------------------------------------------------------------------------
David Seidl, CISSP, GCIH
Information Security Program Manager
Office of Information Technology
University of Notre Dame
Notre Dame, IN 46556
(574)631-7305 
dseidl () nd edu




-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tim Cline
Sent: Thursday, February 05, 2009 11:51 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] key topics to include in security awareness training materials

Greetings,

I wanted to send a very general email message to start a conversation on 
security awareness. For those of you who have something that you 
currently use for security awareness training and dissemination of 
information, whether developed in-house or third-party courseware 
management platform, could you send a reply and let me know what are the 
key topics that you are covering?




Regards,
Tim Cline


Tim Cline
ITS Security Analyst
ITS Security / Information Technology Services
The University of North Carolina at Chapel Hill
(919) 445-9388
Tim_Cline () unc edu