Notes

generic and have one-size-fits-all options.

Deciding on a security learning program really comes down to what works for the employee and employer, the preferred learning style and schedule, as well as the organization’s size and needs. Trainings can be delivered to the workforce in either platform, and both approaches (onsite vs offsite, or virtual instead of live, local classes) can be adopted because both can be effective. When in doubt, why not use blended learning, an education program that combines face-to-face instruction with computer mediated instruction?

For example, online training could provide general security awareness knowledge to employees by pointing out the main factors of risks, general trends and tips. Through this type of training, staff would have 24/7 access to material that builds their skillsets and increases their knowledge in the cybersecurity realm. Customized, in class, training could be periodically offered instead to reinforce knowledge, provide information on the latest security issues and trends, answer questions and solve doubts that employees might have or to address specific concerns after an incident has occurred. In-class training could also be specific to groups of employees in specific departments to focus on their particular needs and concerns.

Many training establishments have developed effective education and training programs that address skillsets and engage and challenge the learner by using a stimulating and creative approach. Organizations like the InfoSec Institute, for example, offer both online and in-class options; the Institute, in particular, has been ranked as a Top IT Training by Training Industry six years in a row according to the following criteria: student satisfaction, courseware quality, certification success, depth and breadth of training offerings, instructor expertise, and online training quality. “No other training company focused on security has ever won this award,” tells Jack Koziol, a Senior Instructor and Security Program Manager at InfoSec Institute. The training option also allows for a mix and match of modules to build a specific learning curriculum in ‘Securing the Human’.