Hint: One giant security training session to rule them all is not the way to go.

Sara Peters, Senior Editor

September 29, 2014

9 Slides

Throwing money at a security problem does not always improve security. Taking money away from an awareness project does not always improve return on investment. So, the panelists advise, do not let the almighty dollar run your awareness program.

Although awareness may give you a better dollar-for-dollar ROI than any other security measure, as Baker suggested, Melancon cautioned, "Don't see spending as a key metric of effectiveness."

Michael Crouse, director of insider threat strategies for Raytheon Cyber Products, added that when it comes to getting management buy-in for security awareness, remember that "buy-in" does not necessarily mean "budget."

Easier said than done? Have other awareness tips and tricks that have done wonders for your organization? Let us know in the comments below.

About the Author(s)

Sara Peters

Senior Editor

Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad of other topics. She authored the 2009 CSI Computer Crime and Security Survey and founded the CSI Working Group on Web Security Research Law -- a collaborative project that investigated the dichotomy between laws regulating software vulnerability disclosure and those regulating Web vulnerability disclosure.


Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights