4-1 Discussion: Security Training and the Importance of a

Security-Aware Culture

Consider your case study from the previous week. Now, we have learned additional

information by interviewing the intern. We have learned that the intern had missed the last

two security awareness training sessions: The intern perceived this training as having a low

priority compared to their other responsibilities, and thought that there would be no new or

relevant information relative to their role in the organization.

For your initial post, select one of the following and respond to it:

What changes could be made that would help build a more security-aware culture

within the security organization? Justify your response.

What tactics or strategies could you employ to help shift people's perspectives from

reactive to proactive when it comes to security? Justify your response.