Duration
2 days
Overview
Certified Information Security Awareness Manager (CISAM) is a 2-days hands-on training and certification programme that provides the essential know-how, enabling information security professionals to develop and manage an effective security awareness programme for their organization.
Objective
- Identify the “As-Is” state of your organisation’s awareness and competence levels;
- Understand the difference between awareness, training and education;
- Build and maintain a comprehensive awareness and competence programme, as part of an organisation’s information security programme;
- Identify awareness, training and competence needs, develop a training plan, and get organisational buy-in for the funding of Select awareness, training and competence topics; Find sources of awareness and training materials;
- Implement awareness and training material, using various methods;
- Evaluate the effectiveness of the programme; Understanding and overcoming the obstacles to success; Update and improve the focus of technology and organisational priorities change; and
- Create an effective social engineering assessment programme.
Target Participant
- Information security officers / ISMS managers
- C-level executives
- Security auditors, risk and compliance managers
- Training managers / Human resource managers
- Anyone responsible to plan and execute security awareness
Introduction
- The difference between “awareness” and “behavior”
- The elements of risks and analysis on why humans are the weakest link
- The learning continuum: awareness, training and education
Designing an Awareness and Competence Programme
- Structuring an organizational awareness and training programme
- Conducting awareness and training needs assessment
- Developing an awareness and training strategy and plan
- Establishing priorities
- Setting the bar
- Funding the security awareness and training programme
Developing Awareness and Competence Material
- Developing awareness material: selecting topics and sources of awareness materials
- Developing training material: a model for building training courses and sources for training courses
Implementing the Awareness and Competence Programme
- Communicating the plan
- Various techniques for delivering awareness material
- Reinforcement of learning
Post-Implementation
- How to monitor compliance
- Evaluation and feedback
- Using metrics to measure the impact of the awareness programme, including how to effectively run phishing assessments
- Managing change
Overcome Obstacles to Success
- Obstacles to success
- Critical success factors
Programme scope, delivery arrangements and suitability are confirmed during enquiry.