Security Awareness Training

The weakest part of any IT System is an untrained user. Security awareness training is a formal process for educating employees about computer security. A good security awareness program should educate employees about corporate policies and procedures for working with information technology (IT).
Employees should receive information about who to contact if they discover a security threat and be taught that data as a valuable corporate asset. Regular training is particularly necessary in organizations with high turnover rates and those that rely heavily on contract or temporary staff.
Confirming how well the awareness program is working can be difficult. The most common metric looks for a downward trend in the number of incidents over time.