A common challenge many of us face in establishing a high-impact security awareness program is getting stakeholder support. Without champions in key positions it is very difficult to get budget, resources or organizational buy-in. As such, often the first step in any awareness program is having to first sell awareness in business terms. We already have several free resources to help you gain stakeholder support at our Stakeholder Resources landing page. We are excited to announce we have just added a new weapon to your arsenal, the Stakeholder Presentation template.
The purpose of this short presentation is to provide a template you can use when communicating to senior management. It explains in non-technical, business terms what the risks (and costs) are of not educating people, what an awareness program is and how it can help address these issues. We know every organization is different, as such this template is designed so you can easily add, remove or edit the slides. Also all slides have detailed notes.
Please send any suggestions on how to make this presentation better at sth-community@securingthehuman.org. We want to make this and all our other resources as effective as possible.
About the Author
Lance Spitzner
Director, SANS Security Awareness
Lance Spitzner has over 20 years of security experience in cyber threat research, system defense and awareness and training. He helped pioneer the fields of deception and cyber intelligence with his creation honeynets and founding of the Honeynet Project. In addition, Lance has published three security books, consulted in over 25 countries and helped over 350 organizations build programs to manage their human risk. Lance is a frequent presenter, serial tweeter ( @lspitzner ) and works on numerous community security projects. Before working in information security, Mr. Spitzner served as an armor officer in the Army's Rapid Deployment Force and