Elevating Security Awareness

Increasing the Relevance and Scalability of End-User Education

Topics: Information Technology, Information Security, IT Governance, Data Management

Reactive Crowds Out the Intentional

The need to respond to minor security lapses (e.g., compromised passwords) keeps IT from focusing education on secure behaviors and preparedness. In addition, proactive security awareness campaigns (described on the next page) are sent to everyone on campus without differentiation, using ubiquity and clever slogans that do not change long-term behaviors.

Higher Education Uniquely Difficult to Secure

The Predictable Fate of Security-as-Campaign