Enhancing the employee security awareness model
J. Andrew Valentine · Computer Fraud & Security · 2006
Traditional employee security awareness programs utilize a very “one-size-fits-all” approach. Usually, every employee within an organization attends the same boiler-plate training session regardless of job function or knowledge level. A more efficient and cost effective approach to implementing an employee security awareness model is to use a specific multi-phased methodology that addresses the specific needs of the organization. The three components to this methodology are the Assessment, Identification, and Education phases.