SAINTCON 2018 - Paige Ishii - How Many Licks Does it take to get to the Center of Security Awareness

Описание: Title: How Many Licks Does it take to get to the Center of Security Awareness?
Speaker: Paige Ishii

Conference: SAINTCON 2018
Location: Track 2
Date: 2018-09-25
Time: 02:30pm -- 03:00pm

You have been tasked with building a security awareness program for your organization. Where do you start? You can forage for fruit and nuts with the other forest creatures, get lost down a spiraling staircase with no end in sight, throwing out idea after idea, Wall of Sheep, Security Shepherd, pulling from your plethora of security buddies to come do a lunch with your staff on why phishing is bad, very very bad! Or…you can build a program based on some sound logic and practicality. Not to say having your buddy talk on phishing techniques isn't a good start, but where do you go from there? So, how many licks does it take to get to the center of a good security awareness program? You can be that wise old owl, and go with three, but a really good program has a few more layers than that. Having done my own research on where to start, and what tools to use, I stumbled upon a few industry standards and recommendations from our friends in security awareness like SANS, KnowBe4, as well as a few others. But with all things, you have to add your own spin to it. This talk will focus on security awareness best practice, where to start, and how to build a mature program everyone( especially the business) can benefit from.