Design IT security participation and awareness strategies as part of the daily life of an organization.
Ali Bagheri, vice president of MAP Live Data for MAP Health Management in Austin: Information security rests on a foundation of people, process and technology. In IT, we tend to focus on the process and technology. To address the final piece of that equation, we need to be sure we are engaging our staff, managers and executives in an effective and meaningful way. Security awareness training should go beyond the stale slide show once a year to include phishing tests, lunch and learn sessions and other bite-size educational opportunities that put information security into context for the individual and keep the topics fresh throughout the year. Getting creative with learning materials, providing immediate feedback and making people think critically are keys to a successful security environment.