Security Awareness Standard (Softcover)

Nonmember Price: $70.00
Member Price: $35.00
In stock
Code (SKU)
2447
Also Available As:

This Standard provides guidance to help organizations establish, implement, and communicate a security awareness program. The goal of a security awareness program is to promote organizational and individual actions that can be taken to reduce risks and promote a culture of security. An effective program provides a framework for awareness of and compliance with security policies and procedures, controls, and practices to ensure organizations and individuals (e.g., employees and others working on behalf of the organization) act responsibly and make appropriate security-related decisions.

This Standard provides general principles, guidance, and examples to assist organizations in creating and maintaining an effective security awareness posture as part of an enterprise security risk management program. The framework in this Standard is applicable to organizations of all sizes and types, regardless of industry or sector (private/public) that wish to obtain:

  1. Top management support of awareness program objectives;
  2. Guidance in understanding the role and importance of security policies and procedures, and promoting enterprisewide compliance with those policies and procedures;
  3. Recommendations for awareness, training, program content, and delivery methods;
  4. Guidance to help influence or modify individual or collective attitudes and behaviors; and
  5. Guidance to help maintain, measure, evaluate, and continuously improve the security awareness program.

This Standard is intended to be incorporated into an organization’s overall enterprise security risk management program to inform and promote its unique security culture.  

This Standard provides guidance to help organizations establish, implement, and communicate a security awareness program. The goal of a security awareness program is to promote organizational and individual actions that can be taken to reduce risks and promote a culture of security. An effective program provides a framework for awareness of and compliance with security policies and procedures, controls, and practices to ensure organizations and individuals (e.g., employees and others working on behalf of the organization) act responsibly and make appropriate security-related decisions.

This Standard provides general principles, guidance, and examples to assist organizations in creating and maintaining an effective security awareness posture as part of an enterprise security risk management program. The framework in this Standard is applicable to organizations of all sizes and types, regardless of industry or sector (private/public) that wish to obtain:

  1. Top management support of awareness program objectives;
  2. Guidance in understanding the role and importance of security policies and procedures, and promoting enterprisewide compliance with those policies and procedures;
  3. Recommendations for awareness, training, program content, and delivery methods;
  4. Guidance to help influence or modify individual or collective attitudes and behaviors; and
  5. Guidance to help maintain, measure, evaluate, and continuously improve the security awareness program.

This Standard is intended to be incorporated into an organization’s overall enterprise security risk management program to inform and promote its unique security culture.  

More Information
ISBN 978-1-951997-04-5
Original Member Price $35.00
Author ASIS Professional Standards Board
Number of Pages 36
Published Date 2020
Languages English
Write Your Own Review
You're reviewing:Security Awareness Standard (Softcover)