Creating an IT Security Awareness Program for Senior Management
By Robert Nellis
This paper will present an approach to creating and deploying a security awareness program with senior management as the intended audience. A successful program for senior management is the key to the security program for the entire organization and therefore needs to be carefully and concisely constructed. Creating the program requires numerous resources, a clear understanding of security within the organization and an understanding of the position of senior management on IT security. This paper will outline the steps necessary to identify the current level of senior management’s IT security knowledge. Once the knowledge level is identified the steps to develop the content of the awareness program based on this knowledge will be discussed.