Related Links

Related Stories

Top 5 Stories


A call for a new standard in infosec training and awareness

31 January 2012

A talk at the Information Exploitation Conference at the Home Office’s Security and Policing Exhibition 2012 today addresses the disconnect between user and professional, and calls for a new standard that focuses on training and awareness.

“Why,” asks Julian Fraser, a director at Data Eliminate Ltd, “are we unable to translate the term ‘infosec’ from the world of academia and technologist into business and civil society language so that we all start paying appropriate attention to the issues that surround infosecurity, and start acting and learning appropriately?”

We need, he says, to make humans the drivers, because “in most cases, it’s humans who represent the vulnerability.”

Fraser points to the ‘negative’ image of infosecurity: it is largely confined to industry and academia; it is technically good, but “beyond the ability of most to understand”; and it is sold by negatives to senior management who are already converted. The PBI, the user, remains largely unengaged.

His argument is that we need to reverse this picture in order to create a positive demand for infosecurity – to reach out to the social media generation. And the way to do this is via a new infosecurity standard that solely focuses on training and awareness and is delivered in the work environment. “Many of the beneficiaries are likely to be young,” he says. “Their eyes will be opened. They will start to critically assess and demand changes internally, just as they already do in green issues today.”

This article is featured in:
Security Training and Education


Comment on this article

You must be registered and logged in to leave a comment about this article.

We use cookies to operate this website and to improve its usability. Full details of what cookies are, why we use them and how you can manage them can be found by reading our Privacy & Cookies page. Please note that by using this site you are consenting to the use of cookies. ×