Security awareness & training — what have you found more effective, short-term or long-term programs?

Awareness & TrainingGovernance, Risk & Compliance

Short-term programs77%

Long-term programs22%

305 PARTICIPANTS
3.1k views

Content you might like

Do you have a clear understanding of your legal liability in case of a breach?

Yes44%

Only partial understanding48%

No5%

Unsure1%

View Results

What channels do you use for your security awareness campaigns? Select all that apply.

Targeted emails43%

Org-wide newsletters60%

Lunch & learn sessions47%

Posters, desktop screen-savers/wallpapers37%

Security champions across all lines of business18%

Other (please specify)1%

View Results

I am looking for insights on establishing an Architecture Review Board (ARB) within our organization. As we aim to enhance our architectural governance and ensure alignment with our strategic objectives, we recognize the importance of setting up an effective ARB. To this end, I would greatly appreciate your guidance on the following aspects:       1. Establishing a Charter: What key elements should be included in the ARB        charter to clearly define its purpose, scope, and authority?       2. Member Selection: What criteria should we consider when selecting members for the ARB to ensure a diverse and knowledgeable board?       3. Review Process: Could you share best practices for structuring the review process to ensure thorough and consistent evaluations of architectural proposals?       4. Decision-Making: What are effective methods for making decisions within the ARB, and how can we ensure transparency and accountability?       5. Documentation and Communication: What templates or tools would you recommend for documenting reviews and communicating decisions to stakeholders?      6. Measuring Success: How can we establish criteria for measuring the success and impact of the ARB on our architectural practices? Your expertise and experience in this area would be invaluable to us as we embark on this initiative. Any additional insights or resources you could provide would be greatly appreciated. 

Read More Comments

We are on the cusp of conducting a pilot of AI tooling - we intend to use Gemini & CoPilot, providing training, guidance & policy to our user group.  Before we start we should conduct a risk assessment -  my question is: can you recommend a tool or template?

Read More Comments

If you get hired by an SMB and you’re the company’s first/only security practitioner, where should you start? (Should you focus on SANS top 20 controls? Or start with the NIST framework?)

Read More Comments