Friend of the Blog Miki Calero has a quick article up, “Do You Trust The Mailroom Clerk” in Security Solutions.com magazine.
It’s a great point, with our orders to identify, clarify and classify, information and who has access - we account for all sorts of “cubical creatures”, but tend to leave out the guy who has to change the fluorescent lighting. I especially like the following:
Consider doing so within a framework that is both simple and effective: the elements of adult learning. You know your audience well: you hold the door open for their mail cart, and ask about their children; you send them a “thank you” e-mail for having replaced the flickering fluorescent tube above your desk; you greet them by name as you enter the building. With these relatively effortless actions, you have tended three of the four elements of adult learning: motivation, retention, transference.
Tags: awareness, compliance, information risk, information, risk, risk management, risk_management, information, security, information security, information_security, governance, compliance, enterprise_architecture
(via RiskAnalys.is)June 10, 2007, 10:24am Comments