TABLE OF CONTENTS It s important to plan now for future review and training. Working with technology in an organization can get very hectic, and if you put off planning then you are far less likely to do it. It s important to review your security polices and practices often to verify they re actually being implemented. Many times great policies are in place but never enforced and so they are never actually followed. It s also important to train your employees often to ensure that they understand and are reminded of your security policies. Periodic training also emphasizes the importance of security polices to employees so they re more likely to follow them.
| Tip | We recommend training session that are brief and often For example, a short 15-minute reminder session several times a year will likely be better than an hour-long review session once a year. |
Here are some ideas of things you may want to review with employees at your organization:
Passwords What makes a good password? Remind them never to share their password with anyone for any reason. Warn them of common mistakes such as writing passwords on a post-it note and sticking it on the computer monitor.
Social Engineering Don t let people fool you. Make policies for visitors clear to ensure that a malicious visitor won t leave with information they shouldn t have. Also, you could review polices for verifying an employees identity when they make requests (such as...
