Back

Roberta J. Witty Research VP Browse by this Analyst Ray Wagner Research VP Browse by this Analyst Resources Search for Related Topics: Security and Privacy Vulnerability Management Search for Any Topic Create Alerts for this Topic: Security and Privacy Vulnerability Management Create Alerts for any Topic: Browse Security Strategies Ask an Analyst Need to look up a term?   Check out our glossary Print this page

An information security awareness training program is a tool that all companies, regardless of size, need to implement. Without one, serious IT risks may be overlooked.  Read More Information Security Awareness Training Is Essential to Protect IT Assets Technology can protect the workforce against external security threats to IT assets, but educating those users will also protect them against themselves. Vendors Offer Diverse Methods for Information Security Awareness Training Information security awareness training products and courses reinforce information security policies by helping you educate your employees about protecting IT assets and company information. Select the training method that best suits your organization's needs and culture. Measure the Effectiveness of Your Security Awareness Training Program The idea that you can't measure both the effectiveness of an awareness program and its capability to improve an organization's security is a myth. Use Gartner's metrics to assess the success or failure of your corporate security awareness training. How to Manage an Information Security Awareness Program IT security managers must create clear, enforceable security policies and lead by example to promote a "security-aware" corporate culture. Employee education and accountability will be key components of the program.