2.4 Explain the importance of security-related awareness and training

Security is useless if users aren’t properly trained to perform their work tasks within the confines of the secured environment. Security training for employees is essential to the success of any security endeavor. It should be part of your security policy and business operations. This should include communication, awareness training, education, and support through online resources.

As a security professional in any organization, you must keep the lines of communication open. This means you should be up-front about security requirements for all personnel. Clearly train users on how to perform their work tasks while maintaining security.

As a manager, be open to discuss security ...

Get CompTIA Security+™: Review Guide, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.