Security Awareness For Dummies

Introduction 1

Part 1: Getting to Know Security Awareness 5

Chapter 1: Knowing How Security Awareness Programs Work 7

Chapter 2: Starting On the Right Foot: Avoiding What Doesn’t Work 19

Chapter 3: Applying the Science Behind Human Behavior and Risk Management 33

Part 2: Building a Security Awareness Program 51

Chapter 4: Creating a Security Awareness Strategy 53

Chapter 5: Determining Culture and Business Drivers 61

Chapter 6: Choosing What to Tell The Users 75

Chapter 7: Choosing the Best Tools for the Job 89

Chapter 8: Measuring Performance 107

Part 3: Putting Your Security Awareness Program Into Action 119

Chapter 9: Assembling Your Security Awareness Program 121

Chapter 10: Running Your Security Awareness Program 143

Chapter 11: Implementing Gamification 165

Chapter 12: Running Phishing Simulation Campaigns 181

Part 4: The Part of Tens 207

Chapter 13: Ten Ways to Win Support for Your Awareness Program 209

Chapter 14: Ten Ways to Make Friends and Influence People 215

Chapter 15: Ten Fundamental Awareness Topics 221

Chapter 16: Ten Helpful Security Awareness Resources 227

Appendix: Sample Questionnaire 233

Index 253