The Security Plan-What Employees Need to Know

After the SAP has been designed, it is time to develop all the supporting materials needed for a successful execution of the plan. During the development phase, it is not only essential to take a close look at the list of identified security topics but also to decide what level of training or awareness is needed on each issue.  For example, if employees only need to be aware of a certain policy or procedure, a simple e-mail advisory may be enough.  However, if employees need to develop a certain skillset, it may be necessary to develop a day-long seminar or a comprehensive course. In addition, it is important to think about whether multiple methods of communication are appropriate for certain security topics.

For this Discussion, you will consider what employees of an organization need to know about an organization's security.

Assume you are developing a security plan for a typical mid-size company of just under 500 employees. Analyze the security needs for a company of this size and determine what employees need to know about at least two security topics that need to be covered for this organization. Take into consideration items from the security topics contained in section 4.1.1 of NIST-SP800-50 from this unit's Learning Resources.

Post a 350- to 500-word evaluation of what employees need to know about at least two security topics.  In your evaluation, include the employee behavior(s) an organization should work to enforce and an explanation of materials that should be developed to successfully educate the employees.