What is Security awareness training?
In short
Security awareness training teaches employees to recognize and respond to threats such as phishing and social engineering, handle data safely and report incidents promptly.
Key takeaways
- Simulated phishing tests measure how well training works.
- Training should be regular, not just at hiring.
- Many regulations and frameworks require it.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A company protects its systems with firewalls, multi-factor authentication, encryption, endpoint protection and employee training, so that one failed control does not expose everything. This approach is called: