Educause Security Discussion mailing list archives

Re: IT Security Awareness Training


From: "Cavender, Terry" <terry.l.cavender () VANDERBILT EDU>
Date: Wed, 6 May 2009 09:08:41 -0500

Suggest that you check out (Google)



ACT Online Program has been selected to educate or refresh our workforce on
Information Security. ACT Online content was developed by the University of
Memphis Center for Information Assurance which is recognized by the US
Department of Homeland Security and the National Security Agency as a
National Center of Academic Excellence in Information Assurance Education.



Information Security for Everyone is a self-paced, online course that is
designed to teach the principles and practices that all computer users need
to keep themselves safe, both at work and at home. By presenting best
practices along with a small amount of theory, trainees are taught both what
to do and why to do it. Topics covered include how to secure both clean and
corrupted systems, protecting your personal data, securing simple computer
networks, and safe Internet usage.



Attached you will find the following tools to assist you in rolling this
course out to your staff:



.         Course Description -Includes time commitment, audience, and
desired outcomes

.         About ACT Online -Description of ACT Online Adaptive Tools

.         Instructions for Course Enrollment







Best,

_________________________

Terry Cavender, CISA, PMP
Firewall Analyst

Information Technology Services

Vanderbilt University
( Phone: (615)-343-3494
:  Fax: (615)-343-1605

Mail: Peabody #34

230 Appleton Place

Nashville, TN 37203-5721



Packages: 1231 18th Ave S

Suite 146 Hill Center

Nashville, TN  37212



From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Di Fabio, Andrea
Sent: Wednesday, May 06, 2009 8:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] IT Security Awareness Training



Experts,



I would like to know what your institution is doing to ensure that IS
Training is delivered to all your users of IT systems.  The Commonwealth of
Virginia requires that all IT users undergo IS training.  In the past, we
developed and in house web based training.  To access the training a user
has to authenticate with their LAN account, and once the training is
completed an entry is added to a SQL database.  When it comes time to check
who has taken the training and who hasn't, the process of checking SQL
entries vs. AD users becomes quite lengthy and manual.



Short of deploying an Identity Management system, which we are actually
starting to look into, what are you doing  to automate a process such as
this one?  Can you suggest any open source software or solution?  Would
LimeSurvey do the trick?



Thanks for your feedback.



Attachment: smime.p7s
Description:


Current thread: