Engage! Creating a Meaningful Security Awareness Program

46
Powerpoint Templates Page 1 Powerpoint Templates Engage! Creating a Meaningful Security Awareness Program Ben Woelk Rochester Institute of Technology Cherry Delaney Purdue University

description

Presentation given by Cherry Delaney and Ben Woelk at the EDUCAUSE Security Professionals 2012 conference in Indianapolis on May 17, 2012

Transcript of Engage! Creating a Meaningful Security Awareness Program

Page 1: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 1

Powerpoint Templates

Engage! Creating a Meaningful Security Awareness Program

Ben Woelk Rochester Institute of Technology

Cherry Delaney Purdue University

Page 2: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 2

Introductions

Speakers

Seminar Participants

Page 3: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 3

Seminar OverviewA. Planning

B. Integrating Formalized Training

C.Implementation Workshop

Page 4: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 4

Marketing communications are foundational to increasing your department’s reach and energizing your fan base.

Page 5: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 5

COMMUNICATIONS PLANNING

Page 6: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 6

Why plan?

• Systematic approach

• Repeatable

• Set and achieve goals

• Be proactive

• Be strategy driven, not event driven

• Strategic plan drives marketing/communications plan

Page 7: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 7

Components of a Plan

• Audience analysis

• Key messages

• Communications channels

• Calendar of promotions

• Develop relationships

Page 8: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 8

Audience Analysis

Who are your audiences? How do they communicate now?

Page 9: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 9

Key Messages

• What you’ll communicate– Value proposition– Vectors of differentiation

• Why should they care about your community?

• How you’ll communicate Use credible sources Keep your messages

short and simple

Page 10: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 10

Communications Channels

• What’s the best vehicle?

Page 11: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 11

When to Deliver the Message

Timing is important Leverage opportunities Reuse content Calendar of promotions

Page 12: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 12

Key Relationships

• Build relationships

• Establish partnerships

Page 13: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 13

Implement the Plan

• Get feedback

• Follow calendar of communications, but don’t miss opportunities.

• Develop processes

Page 14: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 14

Evaluate and Make Mid-Course Corrections

• You will make mistakes

• Don’t be afraid to make a change

• Did it make a difference?• Ways to evaluate

– Surveys– Analytics

From austinevan

Page 15: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 15

Integrating Social Media:

Which channels and for what purposes FacebookGoogle+TwitterBlogs

Social media plugins??

Page 16: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 16

Integrating Social Media

Administrative requirements for using social media

–Policies?»Branding?

–Automation–Dashboards

»HootSuite»Tweetdeck

Page 17: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 17

Facebook

• Characteristics– Timeline– Need admin– How to get followers

• Decisions– Page or Group?

• Examples

Page 18: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 18

Twitter

• Characteristics

• Decisions

• Examples

Page 19: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 19

Blog

• Characteristics

• Decisions

• Examples

Page 20: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 20

Google+

• Characteristics

• Decisions

• Examples

Page 21: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 21

Other options

• FourSquare

• Pintrest?

• Email

Page 22: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 22

Managing Social Media

• Dashboards– Tweetdeck– HootSuite– “Auto-tweets”

Page 23: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 23

INTEGRATING FORMALIZED TRAINING

Page 24: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 24

Integrating Formalized Training

• Analysis: Is the performance problem a training problem?

• How will implementing training positively impact a business need or goal?

• What must the learners be able to do in order to ensure the required change in performance?

Page 25: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 25

Basic Design Principles

http://www.nwlink.com/~donclark/hrd/learning_environment_framework.html

Page 26: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 26

Assessment

• Determine where is the gap in knowledge• What is the goal of the training

– Who is the audience– What needs to be taught/learned– Who needs to be at the table discussing the training

– Important to schedule the training time for employees

– Audience analysis – what are the preferred learning styles of the students

– How will instruction occur? Instructor led- where/when? Online tutorials – where will you host/manage/record?

Page 27: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 27

Course Objectives

• What key things need to be taught?• Will there be pre-instructional activities? What are

they?• How many sessions will you need to present the

material? How will you chunk the material?• When will the training occur – daytime, nighttime,

on their “own” time?

Page 28: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 28

Design Instruction

• Instructor led• Tutorial – online style• Distance learning – combination of the above

Page 29: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 29

Instructional Material Development• If instructor led training – will you use PowerPoint, media, duct

tape, computer cards?• If online? what tools to use - Captivate, InDesign, PowerPoint,

YouTube?• Text materials - what is most important- make it concise, easy

to read, clear to understand - think about how easy updating it will be, who will own the materials?

• Will you need to use a subject matter expert to define content and evaluate structure of learning?

Page 30: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 30

Development

• What activities will best bring about the required performance?– How do you engage the students?– What will transfer the learning best to the students in

the most efficient manner?

Page 31: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 31

Implementation• It is best to pilot the training to make sure it flows,

is clear and tested for effectiveness. See what works, what doesn’t. Make changes and test again.

• Schedule the implementation with key stake holders – good training, bad timing, not so effective

Page 32: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 32

Evaluation• How will you evaluate the success of the

training?• How do you test the transfer of knowledge as a

result of training? • Test students or make them perform specific

actions?

Page 33: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 33

Five Main Purposes of Evaluation1. Feedback- linking learning outcomes to objectives – providing quality

control

2. Control – consider organizational culture and most effective means to transfer information

3. Research – determine relationship between training and transfer of training to the job

4. Intervention- the results of the evaluation influence the context in which it is occurring

5. Power Games – manipulating evaluative data for organizational politics.

Page 34: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 34

Managing the Training

• Who updates it, schedules it, registers folks or makes sure they completed training if online?

• Do you have an Learning Management System? How will you integrate your training into it?

Page 35: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 35

Integrating Video

•Topics – event driven, seasonally driven•Costs - $3000 - $4000 for professional product•Resources needed – iPhone has video, video cameras widely owned

Page 36: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 36

Integrating Video continued

• Branding – keep the professional image of the university/department

• Timeline – plan in advance

• Creative control – micro manage or give creative license to artists

Page 37: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 37

Educause Video/Poster Winners

Page 38: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 38

Educause Video/Poster Winners

Page 39: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 39

Educause Video/Poster Winners

Page 40: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 40

Educause video winners

http://www.youtube.com/watch?v=XrIPZi4fnRc&list=PLCD6AD23B84CAC75A&index=1&feature=plpp_video

Page 41: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 41

http://security.rit.edu/dsd/awareness.html

Page 42: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 42

http://www.purdue.edu/securepurdue/

Page 43: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 43

http://www.baylor.edu/its/index.php?id=39967

Page 44: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 44

Page 45: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 45

https://wiki.internet2.edu/confluence/display/itsg2/Cybersecurity+Awareness+Resource+Libraryhttps://wiki.internet2.edu/confluence/display/itsg2/Security+Awareness+Quick+Start+Guidehttps://wiki.internet2.edu/confluence/display/itsg2/Security+Awareness+Detailed+Instruction+Manualhttp://www.educause.edu/SecurityVideoContest

Resources

Page 46: Engage! Creating a Meaningful Security Awareness Program

Powerpoint TemplatesPage 46

Resources continued

• https://wiki.internet2.edu/confluence/display/itsg2/Model+IT+Security+Training+Materials

• https://wiki.internet2.edu/confluence/display/itsg2/Organizing+Your+Campus+IT+Security+Website