One Article Review
| Source |  NoticeBored |
|---|---|
| Identifiant | 413781 |
| Date de publication | 2017-10-02 10:51:19 (vue: 2017-10-02 10:51:19) |
| Titre | NBlog October 2 - a 2-phase approach to bolster the security culture |
| Texte |  We've just updated the NoticeBored website to describe the new awareness module on security culture and delivered the latest batch of security awareness materials to subscribers. Culture is a nebulous, hand-waving concept, hard to pin down and yet an important, far-reaching factor in any organization. The new module (the 63rd topic in our bulging security awareness portfolio) is essentially a recruitment drive, aimed at persuading workers to join and become integral parts of the Information Security function. The basic idea is straightforward in theory but in practice it is a challenge to get people to sit up and take notice, then to change their attitudes and behaviors. During September, we developed a two-phased approach:Strong leadership is critically important which means first convincing management (all the way up to the exec team and Board) that they are the lynch-pins. In setting the tone at the top, the way managers treat information risk, security, privacy, compliance and related issues has a marked effect on the entire organization. Their leverage is enormous, with the potential to enable or undermine the entire approach, as illustrated by the Enron, Sony and Equifax incidents.With management support in the bag, the next task is to persuade workers in general to participate actively in the organization's information security arrangements. Aside from directly appealing to staff on a personal level, we enlist the help of professionals and specialists since they too are a powerful influence on the organization - including management. October's awareness materials follow hot on the heels of the revised Information Security 101 module delivered in September. That set the scene, positioning information security as an essential part of modern business. Future modules will expand on different aspects, each one reinforcing the fundamentals ... which is part of the process of enhancing the security cu |
| Envoyé | Oui |
| Condensat | during october process s the with 101 63rd a account actively after again aimed all along another any appealing appear approach approach:strong are area arrangements aside aspects attitudes awareness awarenessthat bag basic basis batch become been behaviors board bolster bolsteryour bonus boosting build bulging business but can challenge change changes changing comes compliance concept consistency convincing counterproductive: creative critically culture culture and culturethrough delivered demonstrated describe designing determine developed different directly done down drive dusted each earned effect effort enable enhancing enlist enormous enron entire equifax essential essentially exec expand factor far first follow force form foundations from function fundamentals future gdpr general gently get getting glaze goal hand hard has have heels help hence hint hot idea illustrated immediate immediately important improvements incidents including inevitably influence information integral interest issues join just key latest leadership level levels leverage little lots lunch lynch maintain maintaining management managers marked materials may means measured metric metrics mind modern module modules month months more nblog nebulous new next nightmare not notice noticebored november now obvious october once one ongoing organization ourselves out over part participate parts pave people personal persuade persuading phase phased pin pins portfolio positioning potential powerful practice privacy process professionals program provided purpose reaching recruitment reinforcing related repetition results revised revising right risk s security same saying scene security september set setting should simply since sit six sony soon specialists specifically staff straightforward strong subscribers subtle sufficiently suitable support survey surveying take takes task team tech then theory there thing think though through time tone too top topic touch town treat trick tune two undercurrent undermine understanding unless until updated upon value w wasted waving way website weekend well what which will work workers worth yet |
| Tags | Guideline |
| Stories | Equifax |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.