Policy 7230A - Department of Administration

3.1.1.2 Create Training Materials
Once the overall design and plan for the program has been completed
and accepted the scope of awareness training topics must be
established and appropriate and materials prepared:
• Define a list of topics to be covered in the awareness training
program such that sufficient information is shared to raise
Awareness while not overwhelming the audience.
• Prepare materials (e.g. presentations, hands-on sessions) that
will be used during the instructional portion of the program as
well as supportive materials (e.g. posters, SOPs) that will be
used supportively once instruction is competed:
o Messaging in the Awareness program should be short
and simple since the audience is likely to be nontechnical
and simply needs to become more aware of
security requirements.
3.1.2. Provide Awareness Training
Awareness Training is defined as the first level of the security learning
continuum and its purpose is to focus attention on security and allow
individuals to recognize security concerns in order to respond accordingly.
Awareness must be provided to all users of a system:
3.1.2.1 Provide Instructive Training
Instructive training forms the core or initial thrust of the training
program and is delivered in a comprehensive fashion on a periodic
basis:
• Provide sufficient scheduling flexibility to allow all identified
personnel the opportunity to participate in operations training
on a reasonable schedule but with minimal impact to regular
tasks.
• Deliver training via a variety of methods:
o Repetition enhances understanding and adoption.
o Not everyone learns best by the same technique.
3.1.2.2 Provide Training Support
Training support provides enhancements to the training program by
delivering messaging around the concepts covered in the training
program and is delivered on an on-going basis:
• Training support messaging should be concise and to the
point, emphasizing the core messages of the instructive
training.
• Training support messaging should be delivered by a variety of
mechanisms and media to enhance visibility and up-take.
3.2. Security Operations Training
6