Security education programs should include a wide variety of topics related to user habits. In this video, learn important user habits that should be addressed in an information security awareness program, including passwords, data handling, clean desk policies, tailgating, BYOD security, social networking, and peer-to-peer networking.
- [Instructor] Security education programs should include…a wide variety of topics related to user habits.…By replacing risky habits with strong security habits,…organizations reduce the likelihood…that user accounts will become compromised.…Let's take a look at some of the habits…that security education programs should address.…Security training should include coverage…of password security practices.…Most organizations already have a password security policy…that enforces requirements, such as password complexity…and password expiration.…
Security training programs…should remind users of these requirements…and to also education them…about the importance of requirements…that can't be enforced with technology.…For example, users should know…that reusing their work password…on websites and other accounts jeopardize the security…because those websites or other accounts may be compromised.…Organizations should also include data handling procedures…in their security training programs.…Users must know the proper ways to store, transmit,…
To join one of Mike's free study groups for access to bonus tips and practice questions, visit certmike.com.
- The security triad: confidentiality, integrity, and availability
- Security principles
- Resource security
- Data security
- Security controls
- Assessing security controls
- Security policy
- Physical security
Skill Level Intermediate
Q: This course was updated on 05/18/2018. What changed?
A: New videos were added that cover software licensing. In addition, the following topics were updated: integrity, leveraging industry standards, data encryption, security control selection and implementation, audits and assessments, security policy framework, security policy training and procedures, and ethics.
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
1. The Security Triad
2. Security Principles
3. Resource Security
4. Data Security
5. Data Security Controls
6. Security Controls
Control frameworks3m 55s
7. Assessing Security Controls
8. Security Policy
9. Awareness and Training
10. Physical Security
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.