Читать книгу Security Awareness For Dummies - Ira Winkler - Страница 22

IN THIS CHAPTER

Making compliance the goal — and nothing more

Failing to compel compliance

Overindulging in science with limited practical use

Mistaking social engineering skills for awareness expertise

Setting inappropriate expectations

Valuing products more than process

Buying into gimmicks that yield no results

Overestimating the role of security awareness

After working in the security awareness field for 30 years, I have learned the importance of knowing not only what works but also what doesn’t work. In the security awareness field, knowing what doesn’t work is almost more important than knowing what works.

This chapter helps you sidestep the problems I encountered throughout three decades spent working in security awareness. Your security awareness programs probably won’t be perfect from the start, but being aware of the red flags can definitely help you steer your program in the right direction.