Traditional employee security awareness programs utilize a very “one-size-fits-all” approach. Usually, every employee within an organization attends the same boiler-plate training session regardless of job function or knowledge level. A more efficient and cost effective approach to implementing an employee security awareness model is to use a specific multi-phased methodology that addresses the specific needs of the organization. The three components to this methodology are the Assessment, Identification, and Education phases.
No takes yet. Share an insight, caveat, or question.
J. Andrew Valentine (2006) studied this question.