مدیریت یک برنامه‌ی آگاهی‌رسانی و آموزش امنیت اطلاعات و حریم خصوصی ۲۰۱۰
Managing an Information Security and Privacy Awareness and Training Program 2010

1. Front cover

2. Contents

3. Foreword

4. Preface

5. About the Author

6. Introduction

7. Chapter 1: Brief History ofCorporate InformationSecurity and Privacy Awareness and Training

8. Chapter 2: Why Training and Awareness Are Important

9. Chapter 3: Legal and RegulatoryRequirements for Training and Awareness

10. Chapter 4: Incorporating Trainingand Awareness into Job Responsibilities and Appraisals

11. Chapter 5: Common Corporate Education Mistakes

12. Chapter 6: Getting Started

13. Chapter 7: Establish a Baseline

14. Chapter 8: Get Executive Supportand Sponsorship

15. Chapter 9: Identify Training and Awareness Methods

16. Chapter 10: Awareness and Training Topics and Audiences

17. Chapter 11: Define Your Message

18. Chapter 12: Prepare Budget and Obtain Funding

19. Chapter 13: Training Designand Development

20. Chapter 14: Awareness Materials Design and Development

21. Chapter 15: Communications

22. Chapter 16: Deliver In-Person Training

23. Chapter 17: Launch Awareness Activities

24. Chapter 18: Evaluate Education Effectiveness

25. Chapter 19: Leading Practices

26. Appendix A: Sample Executive Education Sponsorship Memo

27. Appendix B: Training Contact Training Data Collection Form

28. Appendix C: Effectiveness Evaluation Framework

29. Appendix D: Sample Privacy Roles Definitions

30. Appendix E: Suggested Privacy Awarenessand Training StrategyAnnouncement as Voice Mail Message

31. Appendix F: Privacy Icon or Mascot

32. Appendix G: Sample Privacy Training Survey

33. Appendix H: Privacy Sample Training Plans

34. Appendix I: Advocate and SME Interview Questionsto Assist with Privacy Training Development

35. Appendix J: Training and Awareness Inventory

36. Appendix K: Incorporating Training and Awareness into theJob Appraisal Process Interview/Questionnaire

37. Appendix L: Sample Customer PrivacyAwareness and Training Presentation

38. Appendix M: Designated Security- and Privacy-Related Days

39. Appendix N: Education Costs Worksheet

40. Appendix O: Sample Pretraining/Awareness Questionnaire

41. Appendix P: Security Awareness Quiz Questions

42. Appendix Q: Social Engineering Quiz

43. Appendix R: Information Security and Privacy Awareness and Training Checklist

44. Appendix S: Awareness and Training Resources

45. Appendix T: Awareness and Training Glossary

46. Appendix U: Sample Case Studies

47. Appendix V: Sample Awareness Activity

48. Index

49. Body

50. Back cover