Visitors Edition
Membership Help?
Need help? Our Trial Membership program will get you help on any IT project you're working on. You'll get access to our research, tools, advice and project help.
Start your free trial membership now:
Want to learn more about our membership options, pricing, or to get a product demo? Get in touch with one of our reps using an option below.
Learn more About Info-Tech
Click to Chat
  • 10
(Personalize the message)

Email 1:


Email 2:


Email 3:


Email 4:


Email 5:


Build an Enterprise IT Security Training Program

More than 101 – training employees to close your biggest security gap.

More Details

Your Challenge

  • Of all of the enterprise security breaches that occur, greater than 50% derive from employees acting out of ignorance or error. These problems can be addressed with effective security awareness training.
  • Security awareness training must cover many topics and can take many forms; understanding what to teach and how to teach it complicates the process and impedes the efforts of many enterprises.
  • Training itself is only half the battle: testing is essential to demonstrating that training is effective.

Our Advice

Critical Insight

Once-a-year security training and testing, although popular, is one of the least effective security training paradigms. Frequent “microtraining” combined with on-going testing yields greater uptake and a more secure environment.

Impact and Result

Upon completion of the work outlined in this Solution Set, you will have established enterprise training needs, determined appropriate delivery mechanisms, and implemented an appropriate enterprise security awareness training and testing program.


Get to Action

  1. Understand security training and develop a training program.
  2. Define the parameters of a training program.

    Documentation of the factors driving the security training program.

  3. Baseline enterprise training needs.

    Guidance on training topics and delivery mechanisms.

Related Solution Sets

Develop & Deploy a Security Policy

The enterprise can't be secure if it doesn't know how; documents need to get everyone on the same page.

Build a Security Architecture & Roadmap

Architecture and planning; the map to security Shangri-La.

Assemble a Formal Security Management Team

Kick IT security up a notch by assigning permanent staff with dedicated responsibilities.

Perform Security Audits & Assessments

Validate the enterprise's security stance through internal and external auditing.

1 Comment

  • Missing_comment
    John McCormack - 2011-08-10

    It's a decent start, but would be more usefull if you supplied examples of training materials.

Get the Complete Storyboard

See how all the steps you need to take come together, with tools and advice to help with each task on your list.

BONUS: Get access to up to 5 additional free downloads

Download Now

More than 101 – training employees to close your biggest security gap.

Companies Who Helped

  • Seven organizations contributed information to assist with the development of this solution set. Due to the sensitivity of the information, all contributors requested confidentiality.

Solution Road Map

Other Solution Sets in Security Policy & Process
1. Develop & Deploy a Security Policy
The enterprise can't be secure if it doesn't know how; documents need to get everyone on the same page.
2. Build a Security Architecture & Roadmap
Architecture and planning; the map to security Shangri-La.
3. Assemble a Formal Security Management Team
Kick IT security up a notch by assigning permanent staff with dedicated responsibilities.
4. Build an Enterprise IT Security Training Program
More than 101 – training employees to close your biggest security gap.
5. Perform Security Audits & Assessments
Validate the enterprise's security stance through internal and external auditing.
View the full Solution Road Map