Using industry best practices for effective security training

Such programs not only benefit IT security staff and application developers, but they benefit the enterprise workforce at large.Improved employee understanding of appropriate behaviours and best practices for enhanced information security reduces security risks and helps ensure compliance with regulations such as Sarbanes-Oxley, HIPAA, the Payment Card Industry Data Security Standards (PCI DSS) and others. But merely providing security training is not enough. Organisations need to know if training programs have been successful in changing behaviour. In order to provide an effective ...