IT Security Training Framework

Rimmi

Hi,

Since there are so many CISSP Guru, just wonder do you have any have experience developing IT Security Training Framework. I need a framework.


Hope you can provide some feedback on this.

Thank you.

beads

A broad subject unto itself. What specifically are you trying to accomplish? Training technical people? End user education and awareness? I could probably think of another 3-4 more categories that would fit into this as well.

- b/eads

trueshrewkmc

Sorry for being UScentric, but you can try the National Initiative for Cybersecurity Education here:

The National Initiative for Cybersecurity Education (NICE)

There's a whole draft cybersecurity education framework here:

http://csrc.nist.gov/publications/drafts/800-181/sp800_181_draft.pdf

This organization is more cloud centric, but it is international. Could lead to something more generic for security.
https://cloudsecurityalliance.org/

Rimmi

The intent is how you can help to create security awareness in your company for all users (including New Hire). Imagine if you were a security consultant with your CISSP Credential, what would you advise if your CEO/CISO ask to come out with a Security Training framework for all users.

For Example,

1) Sending Security Articles/Advisory to all staff every months.
2) Conduct security Quiz Annually.
3) Create Security Poster


and how to have continuous improvement.