Approaches to user education
May Clifford · Network Security · 2008
Security education can be a daunting task. Many IT professionals and senior managers feel it is an uphill battle to make everyone understand that they have a part to play in the overall security of the organisation. As more reports of incidents involving the loss of sensitive information hit the press, you would think that the job of education had been half done. Certainly, these incidents have raised awareness of security in everyone's minds; but the assumption that this will be enough is a problem. Many employees have little idea of what information is and is not important to their employer. Obviously good communication is vital and there is a great deal to be gained from an effective information security awareness programme.