The right metrics can make or break a security program (or a budget meeting).
March 16, 2015
Just how effective is all of that "soft" spending on security awareness training? Steve Santorelli of Team Cymru says there are ways to track and measure that, primarily through phishing and social engineering stress testing, where you test you staff for phishing awareness and social engineering awareness.
Basically, you run a fake phishing campaign and make a few hoax calls," says Santorelli, director of analysis and outreach for the research firm. "Reward and publicize good results, help failures to learn from their errors, and you'll have folks actively watching out for these attacks--for a few weeks at least."
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024