Information Security Training

As organizations store and share increasingly sensitive information, the number and severity of security incidents have increased dramatically. To protect their data, employers must train employees on how to identify risks and prevent costly breaches.


Why Train on this Topic?

Your organization has accumulated a great deal of confidential information about your employees, customers, products, research and financial status. Virtually every member of your workforce impacts the security of this information — a risk that is magnified as our workplace becomes more mobile and decentralized.

Even significant investments in hardware and software and the most elaborate planning and processes can be compromised by employee negligence or ignorance. Any security breach has the potential to materially impact your organization. The recent Computing Technology Industry Association Trends in Information Security Report found that each security breach results in an average cost of $200,000.


Course Content

This course brings an understanding of the importance of protecting confidential information, not only from a business requirement, but from an ethical and legal perspective. Employees learn what they can do to protect their organization’s confidential information. Topics include:

• The “CIA Triad” of confidentiality, integrity, and availability
• The regulatory environment including the Gramm-Leach-Bliley Act, Health InsurancePortability and Accountability Act of 1996 (HIPAA), The Fair Credit Reporting Act (FCRA), Sarbanes-Oxley Act of 2002 and U.S. state data breach laws
• Internet use and abuse and risk created by discussions groups and listservs
• Password protection and vulnerabilities
• Importance of timely application of system updates and patches
• Laptop, handheld, and wireless security
• Reporting data security breaches, high-risk practices and suspicious circumstances

How is the Course Information Delivered?

Through a series of scenarios and interactive exercises, employees learn practical skills that are
necessary for the protection of confidential information. Employees are asked to answer multiple choice questions where they consider the possible outcomes and implications of potential threats to information security. They are also required to correctly answer questions in a ‘Quiz Show’ exercise in order to complete the course.