TABLE OF CONTENTS Provide an understanding of the necessity of IA education, training, and awareness within the organization
Provide organizations with a basic process for developing a program to provide IA education, training, and awareness
An organization should consider the IA education, training, and awareness of its employees as a significant investment. The significance is equal to that of any other investment that an organization must make to achieve its objectives and meet the needs of its customers. This results from the extent of the operational dependency that organizations have on their IA baselines for their survival, coexistence, and growth. The significant growth of electronic commerce (e-commerce) provides the best case supporting this fact. The lack of sufficient IA education, training, and awareness for employees could actually result in a loss of productivity and revenue for organizations. In essence, if an organization doesn't sufficiently expend resources for the IA education, training, and awareness of its employees "up front," then it may have to expend even more resources at a later point because of the lack of employee knowledge or misunderstandings. IA incidents, and thus costs to organizations, could result from such a situation.
IA education, training, and awareness encompasses all individuals within an organization who work directly with the IA baseline, such as system administrators, as well as those who directly or indirectly receive information from the IA baseline. Employees need to fully understand the necessity of IA and its contributions to the...
