Fizza Cola, a popular soda manufacturer, is an international leader in soda production. The company has also been instrumental in developing a lot of the most recent technology used in the bottling industry. However, given the financial growth Fizza Cola has recently experienced, there have been growing concerns surrounding minor security incidents. Recently, Fizza Cola has experienced phishing emails that have resulted in malware being installed onto computer workstations. Executives are most concerned with trade secrets and copyright infringement laws dealing with intellectual property. The executives have already implemented new technology (hardware) to help combat cyber threats in general, and they now want to invest in making their employee training more robust. As part of the information security team, you are being asked to evaluate the organization’s approach to cybersecurity awareness and training The executives have provided the following list of questions and concerns:
The frequency of mandatory security awareness training is currently undefined. The audience of the training is currently undefined.
1. What are the most important areas to focus on in the security awareness training?
2. What areas of the awareness training are missing that, if present, would help limit the security issues the company is currently experiencing?