The Awareness Program: The Key Steps to a Resilient Security Culture

The CISO or Security Officer of an organization has a wide range of responsibilities. From project support to stakeholder management, risk assessment, policy management, and empowerment and training of all employees. Employees should be approached in a manner that is as risk and target group oriented as possible. Training is often conducted in response to a current security incident or in response to findings after an audit. In most cases, there is no strategy or concept in place to enable employees in the long term.