Good example of employee awareness test/training
There’s an interesting story I read today as part of my daily RSS follow.
The DOJ (Department of Justice) (USA) conducts regular employee security awareness tests. The most recent one was a 2 day e-mail hoax, fishing out of their employees potentially sensitive information.
There are several good things about that:
1 – people will get trained the best way possible – by experience
2 – the information will not leave the company, if somebody gives it out
3 – knowing that they might be tested and lose “points” in case of failure to maintain awareness, they will actually be cautious most of the time…
They have been doing this for the last 3 years – when will you start?
If you want to read the full story – http://news.cnet.com/8301-1009_3-10153795-83.html