Information Security Awareness Services

advertisement
MicroSolved, Inc.
Information Security Awareness
Services
Your clients, business partners, and perfect strangers all have
access to your companies critical information systems in some
form or another. With increased connectivity and collaboration
also comes increased threats and risk. As technology gets more
sophisticated, so do attackers.
Many organizations see their first line of defense in this information age as technology solutions, as if a piece
of hardware or software could be a “silver bullet” that eliminates risk. Unfortunately, this approach ignores the
weakest link in organizational security: people. Whether harvesting user information from the web, or using
direct social engineering attacks, when today’s technology criminals attack, they will use your own employees
against you.
MicroSolved Inc. (MSI) awareness programs help you understand the threats, risks and consequences to your
entire organization. By increasing awareness about information security topics and regulatory concerns within
your organization, MSI delivers awareness programs that create real value from the moment they begin and
continually reinforce that value by reminding your team about the real world risks they face on a daily basis.
The MicroSolved Approach
Let’s face it, buying a poster or two isn’t going to get the job done. To implement a successful awareness
program, you must invest in a proven, interactive educational methodology. MSI offers awareness programs
that utilize a variety of mediums, pertain to every level of employee, and are applicable to any regulatory
requirements your organization might face. Depending on your choice of program, our unique, interactive
delivery mechanisms present topics in an exciting manner that will help your employees understand and retain
your curriculum.
MSI learning services feature our e3 education methodology. Co-developed by information security and
organizational behavior experts, e3 is a powerful tool for creating effective and lasting change in the security
posture of your organization. The e3 methodology consists of three phases:
emphasize
educate
evaluate
Educate Phase
In the Educate Phase, MSI works with you to categorize the needs of your employee
population, develop and choose the information security messages and regulatory
guidelines that your employees need to hear. The education phase culminates in an initial
impact presentation that will introduce our developed message and will open wide the eyes
of your employee audience.
Emphasis Phase
In the Emphasis Phase, we work with you to reinforce our initial message via customizable
delivery mechanisms. Using, desktop software, web, video, and other mediums, these
regular reminders will ensure that end users not only understand the initial message but
remember to apply it to their everyday work habits.
Evaluation Phase
Once we’ve delivered and reinforced our initial messages, MSI will evaluate how well your
employees have retained the message. Web surveys, interviews, and print feedback will
help focus and sharpen the subject matter your employees may not have retained. This
will also help discover and guide new topics your organization needs to address.
Security Topics Include:
Reporting Incidents
Access Control
Passwords
Social Engineering
Backups
E-mail Use and Security
Instant Messaging
Spyware
Internet Security (cookies, client
side attacks, fraud)
Home PC Security
Mobile Devices (Laptops, PDAs)
Malicious Software
Software Licenses and Piracy
Threats and Vulnerabilities
Physical Security
Wireless Technologies
Telecommuting
Personal Use (Appropriate Use)
Privacy
Ethics
Identity Theft / Phishing
Business Continuity
Data Protection
Compliance
Sarbanes-Oxley
Gramm-Leach-Bliley Basics
End User Responsibilities
Corporate Phishing
Presentation Media Includes:
Customizable Desktop Reminder Software
DVD Videos
Streaming Video
Posters
Web-Based Tutorial
Intranet Security Awareness Add-On Program
Banner Ads
Quarterly Interactive Tutorials
Infosec RSS Feed
Screen Saver Subscription
Marketing Mailer / Pamphlets / Brochure Reminders
E-Books
Corporate Services Include:
Awareness Assessment Programs
Awareness Audits
Awareness Program Management
Social Engineering Penetration Testing
Regulatory concerns, connected business processes,
and sophisticated technology criminals threaten your
organization. To address these new risks, businesses
are augmenting their investment in technology controls
and policy documentation with comprehensive end
user awareness programs. MSI will educate your
employees about serious security concerns they face
and how their involvement can significantly protect your
business.
For More Information Please Contact
MicroSolved, Inc.
http://www.microsolved.com
info@microsolved.com
(877) 351.1237
Download