Security Awareness Training and Privacy

An organization's security policy sets the standard for the way in which critical business information and systems will be protected from both internal and external threats. Security policy must adapt to changing needs within the organization. Personnel responsible for creating and maintaining the security policy must learn to recognize changes in technology that impact security and how those changes impact the organization and the people who work for the organization. A key concern in today's society is the privacy of individuals. The advances in technology have made it possible to store vast amounts of information about people at very little expense. Technology has also made it possible to access that information in a matter of seconds. Security awareness programs are designed to educate users on the security policy of an organization. The goals for a security awareness program should include not only education about the organization's security policy but should help to foster an understanding of how the policy protects the business, the employee, and customers. Security awareness training should educate employees at a high level how monitoring tools are used and what information can be gathered by those tools.