Concept 9
Security Awareness Policies
Rules for how employees learn and follow security practices.
Security awareness policies explain how employees should learn and follow security practices.
The goal is:
“Teach employees how to avoid security threats.”
These policies often require:
- Security training
- Phishing awareness
- Reporting suspicious activity
- Password safety
Humans are often the weakest security point, so awareness training is very important.