Creating a security awareness program for compliance is simple. Creating an active, long term and engaging security awareness program that has an impact is hard. To help you and your organization with your security awareness program I updated the SANS Securing The Human Deployment kit. This is package has been completely updated with over 15 documents to help you build a high impact security awareness program, including an example stakeholder matrix, security awareness survey, policy template, marketing and communication templates, and execution plan and checklist. Many of these materials are based on SANS MGT 433, which I'll be teaching this March in Orlando.
If you are planning a new security awareness program, or want to improve an existing one I highly recommend you try this deployment kit. If you have any suggestions for new materials, or corrections for existing ones, please let me know at lspitzner@sans.org.
About the Author
Lance Spitzner
Director, SANS Security Awareness
Lance has over 20 years of security experience in cyber threat research, awareness and training. He invented the concept of honeynets, founded the Honeynet Project and helped pioneer the field of cyber intelligence. Lance has published three security books, consulted in over 25 countries and helped hundreds of organizations establish mature security awareness programs. Lance serves on the Board for the NCSA, is a frequent presenter, serial tweeter ( @lspitzner ) and works on numerous community security projects. He served as an armor officer in the Army's Rapid Deployment Force and earned his MBA from the University of Illinois.