Security: The Human Factor

CHAPTER 7: WHY RAISE AWARENESS?

According to the European Network and Information Security Agency (ENISA)²⁴, an information security awareness programme will:

• Provide a focal point and a driving force for a range of awareness, training and educational activities related to information security, some of which might already be in place, but perhaps need to be better co-ordinated and more effective.
• Communicate important recommended guidelines, or practices, required to secure information resources.
• Provide general and specific information about information security risks and controls, to people who need to know.
• Make individuals aware of their responsibilities in relation to information security.
• Motivate individuals to adopt recommended guidelines ...