Creating a security awareness program for compliance is simple. Creating an active, long term and engaging security awareness program that has an impact is hard. To help you and your organization with your security awareness program I updated the SANS Securing The Human Deployment kit. This is package has been completely updated with over 15 documents to help you build a high impact security awareness program, including an example stakeholder matrix, security awareness survey, policy template, marketing and communication templates, and execution plan and checklist. Many of these materials are based on SANS MGT 433, which I'll be teaching this March in Orlando.
If you are planning a new security awareness program, or want to improve an existing one I highly recommend you try this deployment kit. If you have any suggestions for new materials, or corrections for existing ones, please let me know at lspitzner@sans.org.
About the Author
Lance Spitzner
Director, SANS Security Awareness
Lance Spitzner has over 20 years of security experience in cyber threat research, system defense and awareness and training. He helped pioneer the fields of deception and cyber intelligence with his creation honeynets and founding of the Honeynet Project. In addition, Lance has published three security books, consulted in over 25 countries and helped over 350 organizations build programs to manage their human risk. Lance is a frequent presenter, serial tweeter ( @lspitzner ) and works on numerous community security projects. Before working in information security, Mr. Spitzner served as an armor officer in the Army's Rapid Deployment Force and