Security awareness

Knowing how security awareness programs work

Starting on the right foot: avoiding what doesn't work

Applying the science behind human behavior and risk management

Creating a security awareness strategy

Determining culture and business drivers

Choosing what to tell the users

Choosing the best tools for the job

Measuring performance

Assembling your security awareness program

Running your security awareness program

Implementing gamification

Running phishing simulation campaigns

Ten ways to win support for your awareness program

Ten ways to make friends and influence people

Ten fundamental awareness topics

Ten helpful security awareness resources

Appendix. Sample questionnaire.