Security Awareness

Introduction

Awareness and training are critical at all stages and levels of information security. For example, upper management needs to learn about the institutional risks; users must be taught how to defend themselves against malicious code; system and network administrators require training to help them maintain and improve the security of the systems they oversee; and information security support staff must be well-versed in all of these areas and have a solid understanding of vulnerability assessment, intrusion detection, incident response, encryption, and authentication.

Resources Developed by the Higher Education Information Security Council (HEISC)

• Cybersecurity Awareness Resource Library
• Executive Security Awareness Resources
• Information Security Poster & Video Contest
• National Cybersecurity Awareness Month (NCSAM) Resource Kit
• National Cybersecurity Awareness Month (NCSAM) Sample Kit
• Security Awareness Quick Start Guide
• Security Awareness Detailed Instruction Manual

College and University Education and Awareness Programs and Resources

• Carnegie Mellon University Software Engineering Institute (SEI) CERT Coordination Center Resources for CSIRTs (Computer Security Incident Response Teams)
• George Mason University Security Awareness
• North Dakota State University ITS Training
• Rochester Institute of Technology Digital Self Defense Training
• Texas A&M University Security Awareness Training
• University of Arizona Information Security Awareness, Education, and Training
• University of Calgary Security Awareness Program
• University of Virginia Security Awareness
• Virginia Tech Awareness Training

Updated October 2012