This chapter is about developing a security awareness culture. No matter what tools and security controls you have deployed, you still need security awareness training for everyone in your company. You’ll want to make it fun. It’s great to come up with a slogan. I took the MIT Sloan Executive Education Cybersecurity for Managers: A Playbook class, and one of the big points was to come up with a slogan for your company. You can make it fun or in a way that fits well with your company’s culture. Gamifying your security awareness is another way to make it more interesting for your employees.

In this chapter, we’re going to cover the following main topics:

• Security awareness training is foundational
• Cybersecurity awareness training products
• Security is everyone’s responsibility
• Security awareness is mandatory and tracked