SLIDE 1
2 | P a g e F S U P r i v a c y & S e c u r i t y T r a i n i n g R e s o u r c e s 1 - 1 8 - 2 0 1 7
Information Security and Privacy Plan – Goal 2: Training and Outreach
People are the most critical component when it comes to protecting data and
- information. When fellow security and privacy best practices, they our best assets:
when they don’t, they are our greatest risk. An effective level of awareness is essential to protect FSU’s IT resources and information. The Plan A training plan can be defined as an educational program that is designed to reduce the number of security and privacy breaches that occur through a lack of employee
- awareness. It targets all users in an organization with specific programs for their
jobs and level of technical expertise. The unit training plan holds employees accountable for their actions by communicating policy to all users. The primary plan deliverable is developing skills and knowledge so that users can perform their jobs using IT systems more securely. The training plan also sets the security tone for the faculty and staff of your unit, especially if it is made part of their onboarding
- rientation. According to the National Institute of Standards and Technology
(NIST) SP 800-16: Federal agencies and organizations cannot protect the integrity, confidentiality, and availability of information in today's highly networked systems environment without ensuring that each person involved understands their roles and responsibilities and is adequately trained to perform them. Delivery methods include: 1) One-on-One Method 2) Formal Class 3) Computer-Based Training 4) Distance learning / Web Seminars 5) User Support Groups 6) On The Job Training 7) Self-Study Methodologies for Implementing Security and Privacy Training Step One: Identify the Programs Scope, Goals, and Objectives Step Two: Identify the training staff Step Three: Identify the Audience Step Four: Motivation Step Five: Administer The Security Training Step Six and Seven: Listen to Employee feedback, evolve the program to increase its effectiveness.