0% found this document useful (0 votes)
14 views1 page

Informational: Security Awareness Is The Knowledge and Attitude Members of An Organization Possess Regarding

Security awareness training covers topics like handling sensitive information, computer security best practices, and workplace security. The goal is for employees to understand the importance of protecting a company's physical and digital assets from theft, damage, or misuse. Being security aware means recognizing risks and supporting an organization by trying to prevent security issues. Security awareness is seen as the first line of defense and aims to promote a long-term culture where employees prioritize security.

Uploaded by

Jordan Moses
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
14 views1 page

Informational: Security Awareness Is The Knowledge and Attitude Members of An Organization Possess Regarding

Security awareness training covers topics like handling sensitive information, computer security best practices, and workplace security. The goal is for employees to understand the importance of protecting a company's physical and digital assets from theft, damage, or misuse. Being security aware means recognizing risks and supporting an organization by trying to prevent security issues. Security awareness is seen as the first line of defense and aims to promote a long-term culture where employees prioritize security.

Uploaded by

Jordan Moses
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

Security awareness is the knowledge and attitude members of an organization possess regarding

the protection of the physical, and especially informational, assets of that organization. Many
organizations require formal security awareness training for all workers when they join the
organization and periodically thereafter, usually annually.[citation needed]

Topics covered in security awareness training include:

 The nature of sensitive material and physical assets they may come in contact with, such as
trade secrets, privacy concerns and government classified information
 Employee and contractor responsibilities in handling sensitive information, including review of
employee nondisclosure agreements
 Requirements for proper handling of sensitive material in physical form, including marking,
transmission, storage and destruction
 Proper methods for protecting sensitive information on computer systems, including password
policy and use of two-factor authentication
 Other computer security concerns, including malware, phishing, social engineering, etc.
 Workplace security, including building access, wearing of security badges, reporting of incidents,
forbidden articles, etc.
 Consequences of failure to properly protect information, including potential loss of employment,
economic consequences to the firm, damage to individuals whose private records are divulged,
and possible civil and criminal penalties

Being security aware means you understand that there is the potential for some people to
deliberately or accidentally steal, damage, or misuse the data that is stored within a company's
computer systems and throughout its organization. Therefore, it would be prudent to support the
assets of the institution (information, physical, and personal) by trying to stop that from happening.

According to the European Network and Information Security Agency, 'Awareness of the risks and
available safeguards is the first line of defence for the security of information systems and networks.'

'The focus of Security Awareness consultancy should be to achieve a long term shift in the attitude
of employees towards security, whilst promoting a cultural and behavioural change within an
organisation. Security policies should be viewed as key enablers for the organisation, not as a series
of rules restricting the efficient working of your business

You might also like