https://www.iotworldtoday.com/wp-content/themes/ioti_child/assets/images/logo/IoTWorldToday-mobile-logo.png
  • Home
  • News
    • Back
    • Roundups
  • Strategy
  • Special Reports
  • Business Resources
    • Back
    • Webinars
    • White Papers
    • Industry Perspectives
    • Featured Vendors
  • Other Content
    • Back
    • Q&As
    • Case Studies
    • Features
    • How-to
    • Opinion
    • Podcasts
    • Strategic Partners
    • Latest videos
  • More
    • Back
    • About Us
    • Contact
    • Advertise
    • Editorial Submissions
  • Events
Iot World Today
  • NEWSLETTER
  • Home
  • News
    • Back
    • Roundups
  • Strategy
  • Special Reports
  • Business Resources
    • Back
    • Webinars
    • White Papers
    • Industry Perspectives
    • Featured Vendors
  • Other Content
    • Back
    • Q&As
    • Case Studies
    • Features
    • How-to
    • Opinion
    • Podcasts
    • Strategic Partners
    • Latest videos
  • More
    • Back
    • About Us
    • Contact
    • Advertise
    • Editorial Submissions
  • Events
  • newsletter
  • IIoT
  • Cities
  • Energy
  • Homes/Buildings
  • Transportation/Logistics
  • Connected Health Care
  • Retail
  • AI
  • Metaverse
  • Development
  • Security
ioti.com

Security


Getty Images

Course Offers Practical Cybersecurity Awareness Training

InfoSec Institute, a cybersecurity education provider, has launched a pragmatic cybersecurity awareness training.
  • Written by Brian Buntz
  • 18th October 2018

Attend any mainstream cybersecurity conference and you’ll likely be bombarded with acronyms and technical jargon. Perhaps you’ll hear play-by-play breakdowns on how to hack internet-connected devices. You also might hear about how cutting-edge machine learning or blockchain will or will not transform the field. But one thing missing from many cybersecurity events — and from the internet for that matter — are step-by-step, detailed plans explaining how to plan and implement an enterprise security awareness training program.

A new course from cybersecurity educator InfoSec Institute is designed to help fill the void. Known as the Certified Security Awareness Practitioner (CSAP) program, it tackles tricky themes such as how to persuade management to back an education cybersecurity initiative, how to engage employees in such a program as partners, as well as how to win executive backing for such initiatives and align them with business objectives. The program also offers advice on delineating responsibilities between a security awareness team and cybersecurity subject matter experts, whether they are full-time employees or working on a contract basis.  

The course is currently the only security awareness practitioner certification program on the market.

Performance assessment management

[IoT Security Summit is the conference where you learn to secure the full IoT stack, from cloud to the edge to hardware. Get your ticket now.]

Having received the opportunity to review the course materials, the program draws from hundreds of slides (281 to be precise — with varying levels of detail) and templates for such practical tasks as doing a cost-benefit analysis of a cyber awareness program or measuring the progress of such an initiative. Also included are templates of emails an organization can use when rolling out or administering a security awareness training campaign and recommendations for sparking employee interest in cybersecurity.

Covering the Internet of Things landscape as a journalist, one often hears about the cybersecurity talent gap. The problem can be especially vexing in industrial environments, which have an acute shortage of experts who understand the needs of that landscape, as well as a difficulty in convincing “hard-hat” workers to focus on cybersecurity. In general, the lack of cybersecurity awareness is a common theme relating to the Internet of Things and to practically all types of organizations — enterprise companies, schools, manufacturers, organizations managing critical infrastructure and so on. 

But the fact is, industries of all stripes often struggle to inspire security awareness in their employees — whether it is a new low-level recruit or an experienced executive. Many cybersecurity professionals take this as a given, concluding that “humans are the weakest link.” Complicating matters, many IT, network and cybersecurity professionals are more subject matter experts than they are either leaders or educators, which can lead to communication problems with employees from different departments.

Conversely, the CSAP program focuses on the human element of enterprise cybersecurity and in terms of its suggestions, goes far beyond the phishing awareness training that is often the centerpiece of many organization’s cyber education programs.

Many of the materials drew insights from feedback from InfoSec Institute’s customer base, as well as from materials in its SecurityIQ training platform, which is designed to be widely applicable. “The program is agnostic to any specific security awareness platforms or tools,” Antipov said. “Rather than just building on our platform and teaching others how to use it, we show them how to build their own.”

The designers of the course analyzed recognized industry standards from entities such as NIST and the PCI Security Standards Council and wove their recommendations into the program.

The course is designed to be broadly applicable — suitable for cybersecurity newcomers and experts alike. “The reality is that if you are involved in cybersecurity in your organization, you automatically will be tasked with leading the security awareness program,” Antipov said. “And, but that does not mean that you have the necessary skills for that specific task.”

An individual with, say, a cybersecurity credential such as CISSP will be able to build an information security program within an organization but also spread the awareness among employees and respond to cybersecurity questions that don’t directly relate directly to IT or cybersecurity infrastructure.

With the first Certified Security Awareness Practitioner Training Boot Camp slated for December, examples of professional types who have enrolled thus far include technology architecture and security design (consulting), cyber risk analyst (government) and technology director (education).

The course also includes a section on building a “security champions program” led by a network of employees who can help seed cybersecurity awareness into the culture. The model can be especially useful for organizations with multiple facilities, whether it is an industrial company deploying IoT technology or a large school with multiple buildings. On the latter point, InfoSec Institute is working with a school with nearly 17,000 students and about 15,000 devices to manage. “They were attacked by ransomware four times and their CTO finally said: ‘OK, we need to have a security awareness program,’” said Kristin Zurovitch, director of corporate communications at InfoSec Institute. The school formed a champions network with 40 different individuals. “These are teachers. They are not IT or security staff, but they had an interest in cybersecurity. They exhibited solid security behaviors and could serve as mentors for others.”

Tags: Security Technologies

Related Content


  • Caltech campus
    Robots Could Gain Sense of Touch, With New Artificial Skin
    New design can help businesses determine the presence of hazardous materials, offer greater safety for workers
  • Clearview AI Fined $9.4M Over Facial Data Scraping
    The company was ordered to delete any data it held on U.K. citizens.
  • Microsoft Ramping up Cybersecurity Service Offerings
    Three new managed services will boost the company’s presence in the security space
  • IoT Product Roundup
    IoT Product Roundup: PTC, Nokia, Arm and More
    All the latest Internet of Things products

Leave a comment Cancel reply

-or-

Log in with your IoT World Today account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Latest News

  • Microsoft Extends Secured-Core Program to IoT Devices
  • Spot the Robot Dog Helps Police Ahead of Boston’s Fourth of July Celebration
  • Unmanned Robotic Combat Vehicle Being Tested
  • Image shows a Close up of lens on black background
    Carnegie Mellon Researchers Invent System to Find Hidden Cameras

Roundups

View all

IoT Product Roundup: Canonical, InfluxData, Wiliot and More

23rd June 2022

IoT Product Roundup: Cisco, Telit, Draganfly and More

9th June 2022

IoT Deals, Partnerships Roundup: Google, Arm, Senet and More

26th May 2022

White Papers

View all

The Role of Manufacturing Technology in Continuous Improvement Ebook

6th April 2022

IIoT Platform Trends for Manufacturing in 2022

6th April 2022

Latest Videos

View all
Image shows Unilever's Alberto Prado at AI Summit 2022 in London

AI Summit 2022: Unilever’s Alberto Prado

Prado talks about how Unilever is using AI to accelerate the speed of new discoveries and gives them access to more breakthrough innovation

Image Shows John Lewis' Barry Panai at AI Summit London 2022

AI Summit 2022: John Lewis’ Barry Panayi on AI in Retail

Panayi talks about data and AI in retail and how individuals and the technology can work together

E-books

View all

How Remote Access Helps Enterprises Improve IT Service and Employee Satisfaction

12th January 2022

An Integrated Approach to IoT Security

6th November 2020

Webinars

View all

Rethinking the Database in the IoT Era

18th May 2022

Jumpstarting Industrial IoT solutions with an edge data management platform

12th May 2022

AI led Digital Transformation of Manufacturing: Time is NOW

9th December 2021

Special Reports

View all

Omdia’s Smart Home Market Dynamics Report

7th January 2022

Cybersecurity Protection Increasingly Depends on Machine Learning

28th October 2020

IoT Security Best Practices for Industry and Enterprise

20th October 2020

Twitter

IoTWorldToday, IoTWorldSeries

IoT Product Roundup: Nokia, Energous, Dashbot and more dlvr.it/STRKDh https://t.co/YgTAI5SXSB

6th July 2022
IoTWorldToday, IoTWorldSeries

A new #IoT bug monitoring system from @CENSIS121 is helping the UK’s #forestry industry fight pests, and save money… twitter.com/i/web/status/1…

6th July 2022
IoTWorldToday, IoTWorldSeries

NHTSA Boss Hints at Federally Regulating Autonomous Vehicles dlvr.it/STQrrw https://t.co/Yjp1UKuaE5

6th July 2022
IoTWorldToday, IoTWorldSeries

Nvidia Powered Driverless Three-Wheelers Set to Debut dlvr.it/STQq0H https://t.co/RrYyVPgFzB

6th July 2022
IoTWorldToday, IoTWorldSeries

New Drone System Aims for Full Autonomy dlvr.it/STQnvV https://t.co/S4O8hb6gQh

6th July 2022
IoTWorldToday, IoTWorldSeries

Bosch, VW Approved to Develop Automated Driving dlvr.it/STQllD https://t.co/neI30dVmC6

6th July 2022
IoTWorldToday, IoTWorldSeries

🤔 Looking for 3 Strategies to Avoid IoT Key Theft? We’ve got you covered! As tech companies continue to develop an… twitter.com/i/web/status/1…

5th July 2022
IoTWorldToday, IoTWorldSeries

AI Summit 2022: Unilever’s Alberto Prado dlvr.it/STMpRN https://t.co/1dyLREr8N6

5th July 2022

Newsletter

Sign up for IoT World Today newsletters: vertical industry coverage on Tuesdays and horizontal tech coverage on Thursdays.

Special Reports

Our Special Reports take an in-depth look at key topics within the IoT space. Download our latest reports.

Business Resources

Find the latest white papers and other resources from selected vendors.

Media Kit and Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • IoT World Series
  • Channel Futures
  • RISC-V
  • Dark Reading
  • ITPro Today
  • Web Hosting Talk

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Login/Register

FOLLOW IoT World Today ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookies Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X