One Main Post and Two peer responses.
Main Post: One-Two Paragraph
Before you begin this discussion, read the following sections from the NIST SP 800-50 Building an Information Technology Security Awareness and Training Program resource:
Section 4.1.1: Selecting Awareness Topics
Section 5.2: Techniques for Delivering Awareness Material
Section 5.3: Techniques for Delivering Training Material
Section 6: Post-Implementation
For your initial post, imagine you are a security analyst consulting with an HR administrator to develop a cybersecurity awareness campaign or cybersecurity training for all company employees. Select a topic from section 4.1.1, and describe how you would either create an awareness campaign using techniques from section 5.2 or a training program using techniques from section 5.3. Explain why you believe your selected topic is better suited for awareness or training, and give your overall rationale for choosing that delivery method.
Responses to peers: ( few sentences is okay) * PLEASE INCUDE NAME OF THE TWO PEERS SELECTED*
In your response posts, address the following:
Assess the proposed awareness campaign or training program. Do you agree or disagree with the approach? Which aspects of the approach were particularly effective? What would you change?
Make a recommendation for one component of a post-implementation strategy to ensure the effectiveness of the awareness or training presented in the post.
All reading material is included as a PDF for reading:
Section 4.1.1: Selecting Awareness Topics
Section 5.2: Techniques for Delivering Awareness Material
Section 5.3: Techniques for Delivering Training Material
Section 6: Post-Implementation
USE PDF: “Cybersecurity Lecture”
