Information security training
Michael H. Cooper · 2008
West Virginia University recognizes that a vital component of Information Security is training. The ultimate goal is to have every first-year student and institutional employee receive initial information security training as well as periodic refresher training for specific or new topics. The challenges in selecting and delivering an effective program to accomplish these measures soon became evident, and many changes were required. Content, delivery method, course requirements, and support were quickly recognized as obstacles. Pilot training was completed and formal training began with the delivery of ISO standard Information Security training to students. After one semester, the obstacles forced us to make the decision to develop our own course content. The information security director, a part-time assistant, one graduate student, an instructional designer, and several members of the WVU iS3PACE (Information Security Services System Promoting Awareness Communication Education) information security collaborative contributed to the effort. The result? The new content was delivered to over 3,000 first-year students as a component of their First Year Experience courses titled "University 101" and "Adventure West Virginia." Additional content and narration were added during the Fall 2007 semester. Pilot training has started for institutional employees. This training has become a key component for driving the cultural changes required to integrate security standards and practices into daily habits. The trail to climbing the "Information Security Training Mountain" is steep and there are many obstacles to safely traverse it. Our "lessons learned" will assist you as you blaze your own trail up the Information Security Training Mountain.