Despite recent arguments in the press and online that staff are weary of training schemes, an information security awareness consultancy reports from the recent Risk and Network Forum that security managers, directors and CISOs believe that the risk of ignoring security awareness training is too great.
The Security Company offers its findings in a report published at: http://www.thesecurityco.com/news/expert-comment/to-train-or-not-to-train/
Samantha Make of Computerworld sparked the debate after a recent RSA conference where she condemned some participants for demonstrating a “distinct lack of understanding” and perpetuating the myth that such programmes are ineffective.
The Security Company’s Bernadette Palmer says: “We found that management recognise these arguments as short-sighted and therefore demonstrate a complete lack of understanding of the purpose and how effective employee education should be delivered. The audience at the Risk and Network forum overwhelmingly supported the view that security awareness training is effective if it’s the right message, delivered in the right context, at the right time.”
For further information – visit http://www.thesecurityco.com
