engage! creating a meaningful security awareness program
DESCRIPTION
Presentation given by Cherry Delaney and Ben Woelk at the EDUCAUSE Security Professionals 2012 conference in Indianapolis on May 17, 2012TRANSCRIPT
![Page 1: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/1.jpg)
Powerpoint TemplatesPage 1
Powerpoint Templates
Engage! Creating a Meaningful Security Awareness Program
Ben Woelk Rochester Institute of Technology
Cherry Delaney Purdue University
![Page 2: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/2.jpg)
Powerpoint TemplatesPage 2
Introductions
Speakers
Seminar Participants
![Page 3: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/3.jpg)
Powerpoint TemplatesPage 3
Seminar OverviewA. Planning
B. Integrating Formalized Training
C.Implementation Workshop
![Page 4: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/4.jpg)
Powerpoint TemplatesPage 4
Marketing communications are foundational to increasing your department’s reach and energizing your fan base.
![Page 5: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/5.jpg)
Powerpoint TemplatesPage 5
COMMUNICATIONS PLANNING
![Page 6: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/6.jpg)
Powerpoint TemplatesPage 6
Why plan?
• Systematic approach
• Repeatable
• Set and achieve goals
• Be proactive
• Be strategy driven, not event driven
• Strategic plan drives marketing/communications plan
![Page 7: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/7.jpg)
Powerpoint TemplatesPage 7
Components of a Plan
• Audience analysis
• Key messages
• Communications channels
• Calendar of promotions
• Develop relationships
![Page 8: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/8.jpg)
Powerpoint TemplatesPage 8
Audience Analysis
Who are your audiences? How do they communicate now?
![Page 9: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/9.jpg)
Powerpoint TemplatesPage 9
Key Messages
• What you’ll communicate– Value proposition– Vectors of differentiation
• Why should they care about your community?
• How you’ll communicate Use credible sources Keep your messages
short and simple
![Page 10: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/10.jpg)
Powerpoint TemplatesPage 10
Communications Channels
• What’s the best vehicle?
![Page 11: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/11.jpg)
Powerpoint TemplatesPage 11
When to Deliver the Message
Timing is important Leverage opportunities Reuse content Calendar of promotions
![Page 12: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/12.jpg)
Powerpoint TemplatesPage 12
Key Relationships
• Build relationships
• Establish partnerships
![Page 13: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/13.jpg)
Powerpoint TemplatesPage 13
Implement the Plan
• Get feedback
• Follow calendar of communications, but don’t miss opportunities.
• Develop processes
![Page 14: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/14.jpg)
Powerpoint TemplatesPage 14
Evaluate and Make Mid-Course Corrections
• You will make mistakes
• Don’t be afraid to make a change
• Did it make a difference?• Ways to evaluate
– Surveys– Analytics
From austinevan
![Page 15: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/15.jpg)
Powerpoint TemplatesPage 15
Integrating Social Media:
Which channels and for what purposes FacebookGoogle+TwitterBlogs
Social media plugins??
![Page 16: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/16.jpg)
Powerpoint TemplatesPage 16
Integrating Social Media
Administrative requirements for using social media
–Policies?»Branding?
–Automation–Dashboards
»HootSuite»Tweetdeck
![Page 17: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/17.jpg)
Powerpoint TemplatesPage 17
• Characteristics– Timeline– Need admin– How to get followers
• Decisions– Page or Group?
• Examples
![Page 18: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/18.jpg)
Powerpoint TemplatesPage 18
• Characteristics
• Decisions
• Examples
![Page 19: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/19.jpg)
Powerpoint TemplatesPage 19
Blog
• Characteristics
• Decisions
• Examples
![Page 20: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/20.jpg)
Powerpoint TemplatesPage 20
Google+
• Characteristics
• Decisions
• Examples
![Page 21: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/21.jpg)
Powerpoint TemplatesPage 21
Other options
• FourSquare
• Pintrest?
![Page 22: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/22.jpg)
Powerpoint TemplatesPage 22
Managing Social Media
• Dashboards– Tweetdeck– HootSuite– “Auto-tweets”
![Page 23: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/23.jpg)
Powerpoint TemplatesPage 23
INTEGRATING FORMALIZED TRAINING
![Page 24: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/24.jpg)
Powerpoint TemplatesPage 24
Integrating Formalized Training
• Analysis: Is the performance problem a training problem?
• How will implementing training positively impact a business need or goal?
• What must the learners be able to do in order to ensure the required change in performance?
![Page 25: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/25.jpg)
Powerpoint TemplatesPage 25
Basic Design Principles
http://www.nwlink.com/~donclark/hrd/learning_environment_framework.html
![Page 26: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/26.jpg)
Powerpoint TemplatesPage 26
Assessment
• Determine where is the gap in knowledge• What is the goal of the training
– Who is the audience– What needs to be taught/learned– Who needs to be at the table discussing the training
– Important to schedule the training time for employees
– Audience analysis – what are the preferred learning styles of the students
– How will instruction occur? Instructor led- where/when? Online tutorials – where will you host/manage/record?
![Page 27: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/27.jpg)
Powerpoint TemplatesPage 27
Course Objectives
• What key things need to be taught?• Will there be pre-instructional activities? What are
they?• How many sessions will you need to present the
material? How will you chunk the material?• When will the training occur – daytime, nighttime,
on their “own” time?
![Page 28: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/28.jpg)
Powerpoint TemplatesPage 28
Design Instruction
• Instructor led• Tutorial – online style• Distance learning – combination of the above
![Page 29: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/29.jpg)
Powerpoint TemplatesPage 29
Instructional Material Development• If instructor led training – will you use PowerPoint, media, duct
tape, computer cards?• If online? what tools to use - Captivate, InDesign, PowerPoint,
YouTube?• Text materials - what is most important- make it concise, easy
to read, clear to understand - think about how easy updating it will be, who will own the materials?
• Will you need to use a subject matter expert to define content and evaluate structure of learning?
![Page 30: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/30.jpg)
Powerpoint TemplatesPage 30
Development
• What activities will best bring about the required performance?– How do you engage the students?– What will transfer the learning best to the students in
the most efficient manner?
![Page 31: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/31.jpg)
Powerpoint TemplatesPage 31
Implementation• It is best to pilot the training to make sure it flows,
is clear and tested for effectiveness. See what works, what doesn’t. Make changes and test again.
• Schedule the implementation with key stake holders – good training, bad timing, not so effective
![Page 32: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/32.jpg)
Powerpoint TemplatesPage 32
Evaluation• How will you evaluate the success of the
training?• How do you test the transfer of knowledge as a
result of training? • Test students or make them perform specific
actions?
![Page 33: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/33.jpg)
Powerpoint TemplatesPage 33
Five Main Purposes of Evaluation1. Feedback- linking learning outcomes to objectives – providing quality
control
2. Control – consider organizational culture and most effective means to transfer information
3. Research – determine relationship between training and transfer of training to the job
4. Intervention- the results of the evaluation influence the context in which it is occurring
5. Power Games – manipulating evaluative data for organizational politics.
![Page 34: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/34.jpg)
Powerpoint TemplatesPage 34
Managing the Training
• Who updates it, schedules it, registers folks or makes sure they completed training if online?
• Do you have an Learning Management System? How will you integrate your training into it?
![Page 35: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/35.jpg)
Powerpoint TemplatesPage 35
Integrating Video
•Topics – event driven, seasonally driven•Costs - $3000 - $4000 for professional product•Resources needed – iPhone has video, video cameras widely owned
![Page 36: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/36.jpg)
Powerpoint TemplatesPage 36
Integrating Video continued
• Branding – keep the professional image of the university/department
• Timeline – plan in advance
• Creative control – micro manage or give creative license to artists
![Page 37: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/37.jpg)
Powerpoint TemplatesPage 37
Educause Video/Poster Winners
![Page 38: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/38.jpg)
Powerpoint TemplatesPage 38
Educause Video/Poster Winners
![Page 39: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/39.jpg)
Powerpoint TemplatesPage 39
Educause Video/Poster Winners
![Page 40: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/40.jpg)
Powerpoint TemplatesPage 40
Educause video winners
http://www.youtube.com/watch?v=XrIPZi4fnRc&list=PLCD6AD23B84CAC75A&index=1&feature=plpp_video
![Page 41: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/41.jpg)
Powerpoint TemplatesPage 41
http://security.rit.edu/dsd/awareness.html
![Page 42: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/42.jpg)
Powerpoint TemplatesPage 42
http://www.purdue.edu/securepurdue/
![Page 43: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/43.jpg)
Powerpoint TemplatesPage 43
http://www.baylor.edu/its/index.php?id=39967
![Page 44: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/44.jpg)
Powerpoint TemplatesPage 44
![Page 45: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/45.jpg)
Powerpoint TemplatesPage 45
https://wiki.internet2.edu/confluence/display/itsg2/Cybersecurity+Awareness+Resource+Libraryhttps://wiki.internet2.edu/confluence/display/itsg2/Security+Awareness+Quick+Start+Guidehttps://wiki.internet2.edu/confluence/display/itsg2/Security+Awareness+Detailed+Instruction+Manualhttp://www.educause.edu/SecurityVideoContest
Resources
![Page 46: Engage! Creating a Meaningful Security Awareness Program](https://reader035.vdocuments.mx/reader035/viewer/2022081518/554c7406b4c90575798b51ab/html5/thumbnails/46.jpg)
Powerpoint TemplatesPage 46
Resources continued
• https://wiki.internet2.edu/confluence/display/itsg2/Model+IT+Security+Training+Materials
• https://wiki.internet2.edu/confluence/display/itsg2/Organizing+Your+Campus+IT+Security+Website