FISMA, HIPAA, GLBA, PCI, 201 CMR 17, and SOX all require security awareness programs so why not do it right. It has been proven that highly effective programs reduce business risk significantly.
Treadstone
71 recommends using multiple media types and methods when delivering an
effective awareness program. Proper
timing and delivery methods are keys to success. Awareness need focus on
corporate policies since employees must understand the your information
security policies to limit their personal violations and enable them to
recognize when other employees violate the policies.
Employees need training on a variety of security issues, such as physical
access, information misuse, acceptable use of corporate assets and e-mail
safety.
Treadstone 71 ensures your employees understand the negative consequences of
Treadstone 71 also ensure you have proper awareness metrics tracking and
management, which most organizations don’t track.
Call today
1-888-687-8450
or email us at
info@treadstone71.com
ISO17799, OCTAVE, CISSP, CISM, Sarbanes Oxley, SOX, CobiT, 27001, ISMS, ISO-27001, ISO 27001, ISO27001, 27005, 27002, GRC, prevention, 17799, proactive, FISMA, defense in depth, arabic, jihadi, cyber jihad, cyber terrorism, holistic security, 201 CMR 17, governance, risk, compliance, Jeff Bardin, Wireless Security, CMM, ITIL, ITSM, Sarbanes Oxley, security awareness, risk, threat, threat matrix, security metrics, ISO1779 training, 21 CFR 11, NSA IAM, BITS, risk management, security in the sdlc, secsdlc, security program, security strategy, business impact analysis, Treadstone 71, bourne, CISM, penetration testing, risk, GRC, detective controls, preventative controls, HIPAA, GLBA, Graham-Leach-Bliley, SAS 70, intrusion detection, interim CISO, interim CIRO, CIRO, CISO, chief security, FFIEC, financial services, trust, continuity, risk assessment, maturity, vulnerability scans, data classification, assessments, disaster recovery, homeland security, security metrics, rosi, roi, training, security posture, threat vulnerability pairs, vulnerability management, security services, information security, risk management, business risk, controls, holistic security, defense in depth, Governance, Risk and Compliance, information risk management