{"id":13354,"date":"2023-12-05T11:24:40","date_gmt":"2023-12-05T05:24:40","guid":{"rendered":"https:\/\/dtasiagroup.com\/?p=13354"},"modified":"2023-12-05T11:25:40","modified_gmt":"2023-12-05T05:25:40","slug":"your-security-awareness-program-can-do-more-than-you-think-fulfilling-the-promise-of-training-for-all","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/your-security-awareness-program-can-do-more-than-you-think-fulfilling-the-promise-of-training-for-all\/","title":{"rendered":"Your Security Awareness Program Can Do More Than You Think: Fulfilling the Promise of \u201cTraining for All\u201d"},"content":{"rendered":"
\n
<\/div>\n<\/div>\n
\n
\n
\n
\n
\n
\n

\"\"<\/p>\n

In the world of security awareness training, we like to think of ourselves as providing training for each employee in the building. There was a time when training non-cyber staff on cyber threats was a novel idea. But, as it became apparent that end users were increasingly becoming one of, if not the single largest, attack vector for cyber threat actors, the field of Security Awareness entered the mainstream.<\/p>\n

In the early days, this was driven by lecture-based presentations focused on identifying and avoiding common threats. But, as the threats became more complex and varied, so too did the range of topics and delivery methods deployed in standard awareness programs. Today, training is more engaging and interactive, utilizing various formats such as videos, simulation, and gamification.<\/p>\n

 <\/p>\n

What is Short-Form Computer-Based Training?<\/strong><\/p>\n

The concept of short-form computer-based training has dominated the Security Awareness Training space, and for good reason. These modules offer a convenient and engaging way to provide employees with the essential security training they need in a format that allows them to complete training in small increments, making it easier to assign within the flow of work with minimal disruption.<\/p>\n

Furthermore, the advanced reporting available in modern learning management systems helps to measure the effectiveness of the training program, identify areas for improvement, and report the program\u2019s effectiveness to executive teams.<\/p>\n

 <\/p>\n

The Case for Individualized Training Content<\/strong><\/p>\n

Until recently, the concept of “training for all” has often been focused on non-technical end users and has overlooked the critical role played by technical staff in securing an organization’s digital infrastructure. But according to successive editions of the\u00a0Verizon DBIR<\/a>, technical misconfigurations continue to be a significant contributor to security breaches.<\/p>\n

Technical employees are critical to the smooth operation of an organization’s digital infrastructure in a variety of ways. Network and system administrators are responsible for ensuring that the hardware and software components of an IT infrastructure are functioning correctly and efficiently.<\/p>\n

Development teams play a critical role in creating and maintaining the software and applications that support operations. Various engineering teams may be responsible for their facility\u2019s control and access systems. In most cases, the primary focus of each of these roles is performance and uptime, rather than secure operation and threat mitigation.<\/p>\n

While security is very likely an essential aspect of the job, it can sometimes take a back seat to the other pressing issues employees in these roles face on a daily basis. This presents an opportunity to take a page from the security awareness playbook to offer a convenient and effective way to keep security top of mind for technical teams.<\/p>\n

 <\/p>\n

The Benefits of Tailored Training in a Digestible Format<\/strong><\/p>\n

Delivering\u00a0technical training<\/a>\u00a0in a similar format as end user awareness training has the potential to reap tangible benefits. The short, modular format makes them easy to fit into the busy schedules of technical employees; allowing them to continue with their daily job duties while still receiving critical training. The role-specific nature of the training can also help increase engagement and retention, ensuring that technical employees are learning and retaining the critical information unique to their roles.<\/p>\n

Furthermore, by providing training in a standardized format, all team members can receive the same level of education, helping to ensure that everyone is working from a common understanding of best practices. By providing consistent training on these practices and procedures, employees will be more likely to comply with them, reducing the risk of non-compliance and potential security breaches.<\/p>\n

SANS has long recognized that delivering training for all requires curricula that covers not only a wide range of scenarios, but also a growing range of job roles and responsibilities. It\u2019s a big part of what drove us to build the largest library of information security training and certification in the world.<\/p>\n

That library extends to our awareness solutions, where SANS continues to explore new methods of targeted training with its role-based technical skills collection that includes short-format technical modules for Development teams, Network and System Administrators, and ICS Engineers, among others.<\/p>\n

Short-format computer-based training has proven to be a powerful tool for providing targeted and consistent awareness training to employees across a range of skill levels and backgrounds. Applying the same methods towards technical employees is the logical next step in helping to improve the security and efficiency of modern organizations. Making \u201ctraining for most\u201d a thing of the past and delivering on the promise of “training for all.”<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n

Source:\u00a0https:\/\/www.sans.org\/blog\/your-security-awareness-program-can-do-more-than-you-think-fulfilling-the-promise-of-training-for-all\/<\/a><\/p>\n

 <\/p>\n

Gi\u1edbi thi\u1ec7u v\u1ec1 DT Asia<\/strong><\/p>\n

DT Asia \u0111\u01b0\u1ee3c th\u00e0nh l\u1eadp v\u00e0o n\u0103m 2007 v\u1edbi s\u1ee9 m\u1ec7nh r\u00f5 r\u00e0ng l\u00e0 x\u00e2y d\u1ef1ng b\u01b0\u1edbc th\u00e2m nh\u1eadp th\u1ecb tr\u01b0\u1eddng cho c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt CNTT ti\u00ean phong kh\u00e1c nhau t\u1eeb M\u1ef9, Ch\u00e2u \u00c2u v\u00e0 Israel.<\/p>\n

Ng\u00e0y nay, DT Asia l\u00e0 nh\u00e0 ph\u00e2n ph\u1ed1i gi\u00e1 tr\u1ecb gia t\u0103ng khu v\u1ef1c v\u1ec1 c\u00e1c gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng, cung c\u1ea5p c\u00e1c c\u00f4ng ngh\u1ec7 ti\u00ean ti\u1ebfn cho c\u00e1c c\u01a1 quan ch\u00ednh ph\u1ee7 tr\u1ecdng \u0111i\u1ec3m v\u00e0 c\u00e1c kh\u00e1ch h\u00e0ng h\u00e0ng \u0111\u1ea7u thu\u1ed9c khu v\u1ef1c t\u01b0 nh\u00e2n, bao g\u1ed3m c\u00e1c ng\u00e2n h\u00e0ng to\u00e0n c\u1ea7u v\u00e0 c\u00e1c c\u00f4ng ty thu\u1ed9c danh s\u00e1ch Fortune 500. Ch\u00fang t\u00f4i c\u00f3 c\u00e1c v\u0103n ph\u00f2ng v\u00e0 \u0111\u1ed1i t\u00e1c kh\u1eafp khu v\u1ef1c Ch\u00e2u \u00c1 - Th\u00e1i B\u00ecnh D\u01b0\u01a1ng nh\u1eb1m th\u1ea5u hi\u1ec3u r\u00f5 h\u01a1n c\u00e1c th\u1ecb tr\u01b0\u1eddng v\u00e0 cung c\u1ea5p c\u00e1c gi\u1ea3i ph\u00e1p mang t\u00ednh b\u1ea3n \u0111\u1ecba h\u00f3a.<\/p>","protected":false},"excerpt":{"rendered":"

In the world of security awareness training, we like to think of ourselves as providing training for each employee in the building. There was a time when training non-cyber staff on cyber threats was a novel idea. But, as it became apparent that end users were increasingly becoming one of, if not the single largest, attack vector for cyber threat actors, the field of Security Awareness entered the mainstream.<\/p>","protected":false},"author":11,"featured_media":13356,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[],"class_list":["post-13354","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/13354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=13354"}],"version-history":[{"count":0,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/13354\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/13356"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=13354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=13354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=13354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}