Designing Security Awareness Shane Edwards, CISSP, CSSLP, CISM, CGEIT, ITIL-F Information Security Architect

Belk Information William Henry Belk founded the first store in Monroe, N.C., on May 29, 1888 The children and other descendants of company founder William Henry Belk and his brother and partner, Dr. John M. Belk, own the majority of Belk, Inc. stock. Thomas M. (Tim) Belk, Jr. is chairman and chief executive officer of Belk, Inc. H.W. McKay Belk is president and chief merchandising officer and John R. (Johnny) Belk is president and chief operating officer. They are sons of the late Thomas M. Belk and nephews of the late John M. Belk. Tom Belk and John Belk were sons of company founder William Henry Belk and together served at the helm of the company for more than 50 years. Kathryn Bufano is Belk, Inc. president of merchandising and marketing. The Belk stores are organized into three operating divisions across 16 states: Alabama, Arkansas, Florida, Georgia, Kentucky, Louisiana, Maryland, Mississippi, Missouri, North Carolina, Oklahoma, South Carolina, Tennessee, Texas, Virginia and West Virginia. Belk employs approximately 23,000 associates in its stores, corporate and division offices and distribution centers.

Who has time to build a Security Awareness Program?

Agenda Program Statistics Resources Pulling it All Together Questions

Program Statistics

Program Statistics CSI Computer Crime and Security Survey in December 2009 stated a whopping 43.4 percent of respondents said that less than 1 percent of their security budget was allocated to awareness training, and 55 percent said current investments in this area were inadequate.

Resources

National Cyber Security Alliance

Resources (cont.) http://www.staysafeonline.org/ncsam National Cyber Security Alliance Nametags Certificates Posters Buttons Letters Website Information

Resources http://www.staysafeonline.org (cont.) National Cyber Security Alliance The NCSA produces a wide range of documents and resources, including tip sheets, materials to support National Cyber Security Awareness Month, and research reports. To make them easier to download and share, we have created the NCSA Resource Library. Some resources are available as Word documents, some as PDFs, and some as both. Feel free to use them in your education and awareness efforts. For more information about using NCSA materials, check out About Us.

ISC 2 cyber exchange

Resources (cont.) ISC 2 cyber exchange Posters https://cyberexchange.isc2.org/ Presentations Papers

Resources (cont.) ISC 2 cyber exchange https://cyberexchange.isc2.org/ I'm Security-Conscious, 2! Help the people in your community and your organization adopt this mantra by downloading any of these fun, free security awareness tools posted on the (ISC)² Cyber Exchange. We encourage you to share these materials with anyone in your community or workplace that would benefit - whether it's your friends, colleagues, or children. You can also rank your favorites. Help us make the cyber world a safer place!

Resources (cont.) ISC 2 cyber exchange https://cyberexchange.isc2.org/ One Step Further!

Resources (cont.) ISC 2 cyber exchange https://cyberexchange.isc2.org/ One Step Further! You must complete the steps listed on the Volunteer Sign Up Checklist before you will be given access to the presentation materials.

Resources (cont.) SANS http://www.sans.org/

Resources (cont.) SANS http://www.sans.org/ In the paper, Fred Hinchcliffe outlines a program using Hacking demonstrations.

Resources (cont.) SANS http://www.sans.org/ Sign up to receive daily tips!

Resources (cont.) SANS http://www.sans.org/ You can take it one step further and enter the Security Tip Contest!

Resources (cont.) SANS http://www.sans.org/ If you want to distribute OUCH to all your users you may either forward it or subscribe a single address that is a mailing list.

OnGuard Online

Resources (cont.) OnGuard Online http://www.onguardonline.gov

Resources http://www.ftc.gov/bcp/edu/microsites/idtheft/ (cont.) FTC s Identity Theft Site

Resources (cont.) OnGuard Online http://www.onguardonline.gov Bookmarks Brochures Booklets

Resources http://www.staysafeonline.org (cont.) National Cyber Security Alliance Did you know? The National Cyber Security Alliance (NCSA) in the United States began National Cyber Security Awareness Month (NCSAM) in October 2001 National Cyber Security Awareness Month is an annual effort to increase awareness and prevention of online security problems, spearheaded by the U.S. Department of Homeland Security and the National Cyber Security Alliance (NCSA).

Federal Trade Commission

Resources (cont.) Federal Trade Commision http://www.ftc.gov/infosecurity/

Resources http://www.ftc.gov/infosecurity/ (cont.) Federal Trade Commision

Resources (cont.) Federal Trade Commision http://www.ftc.gov/infosecurity/

FTC s Identity Theft Site

Resources (cont.) FTC s Identity Theft Site Posters http://www.ftc.gov/bcp/edu/microsites/idtheft/ Brochures Guides

Resources http://www.ftc.gov/bcp/edu/microsites/idtheft/ (cont.) FTC s Identity Theft Site

Internet Keep Safe Coalition

Resources (cont.) http://www.ikeepsafe.org/ Internet Keep Safe Coalition Want to download ikeepsafe content? Please email info@ikeepsafe.org and specify what content you would like to download. We will respond shortly. Thank you, The ikeepsafe team If you want to make a presentation around children

Resources http://www.ikeepsafe.org/ (cont.) Internet Keep Safe Coalition

Resources http://www.ikeepsafe.org/ (cont.) Internet Keep Safe Coalition Online Books Videos Wallpapers

http://msdn.microsoft.com/en-us/security/cc165442.aspx Resources (cont.) Microsoft Security Awareness Program Tool Kit Security Awareness Welcome to the Microsoft security awareness program tool kit and guide. Security Awareness Program Development Guidance This guidance material includes a white paper Key Considerations for Developing Effective Information and Training Programs that outlines how to successfully and effectively address an information security awareness and training program.. Sample Awareness Materials Included is sample awareness content that has been used worldwide to help people recognize and respond to security and safety issues... Sample Training Materials.This material includes sample training sessions intended for IT Professionals. Sample Templates The tools listed here contain messaging templates that can be adapted for your internal security awareness communications.

http://msdn.microsoft.com/en-us/security/cc165442.aspx Resources (cont.) Microsoft Security Awareness Program Tool Kit Guides Whitepapers Presentation Templates Posters Fact Sheets

http://msdn.microsoft.com/en-us/security/cc165442.aspx Resources (cont.) Microsoft Security Awareness Program Tool Kit

Resources (cont.) http://office.microsoft.com/en-us/templates/ct010358990.aspx Microsoft Word Calendar Templates

Pulling it All Together

Pulling it All Together There is free information for Brochures (Templates and Samples) E-Mail Invite Template Fact Sheet (Templates and Samples) FAQs Newsletter (Templates, Samples & Subscriptions) Poster (Templates and Samples) PowerPoint Presentations How to (Templates and Samples) End User (Templates and Samples) Program Review (Templates and Samples) Quick Reference Cards (Templates and Samples) Book Marks (Templates and Samples) Media Files (Templates and Samples) How to Guides & Program Information

So, who has time to build a Security Awareness Program?

Questions