While developing your Information Security Awareness and Training Program, it is necessary to properly document your progress. Through formal documentation of this, it can be presented to management to describe the overall direction of the program. It will also allow any security team member to review and ensure this project can be completed. Some examples of items that this workbook will allow you to document include:
- The initial rationale and objectives for the training program.
- The metrics to measure success of the overall program.
- The different end-user groups and the type of audiences they are.