- Cover image
- Title page
- Table of Contents
- Copyright
- Dedications
- Forewords
- Preface
- About the Authors
- Acknowledgments
- Chapter 1: What Is a Security Awareness Program?
- Chapter 2: Threat
- Chapter 3: Cost of a Data Breach
- Chapter 4: Most Attacks Are Targeted
- Chapter 5: Who Is Responsible for Security?
- Chapter 6: Why Current Programs Don't Work
- Chapter 7: Social Engineering
- Chapter 8: Physical Security
- Chapter 9: Types of Training
- Chapter 10: The Training Cycle
- Chapter 11: Creating Simulated Phishing Attacks
- Abstract
- Simulated Phishing Attacks
- Understanding the Human Element
- Methodology
- Open-Source Tool, Commercial Tool, or Vendor Performed?
- Before You Begin
- Determine Attack Objective
- Select Recipients
- Select a Type of Phishing Attack
- Composing the E-mail
- Creating the Landing Page
- Sending the E-mail
- Tracking Results
- Post Assessment Follow-up
- Chapter 12: Bringing It All Together
- Chapter 13: Measuring Effectiveness
- Chapter 14: Stories from the Front Lines
- Appendices
- Appendix A: Government Resources
- Appendix B: Security Awareness Tips
- Appendix C: Sample Policies
- Appendix D: Commercial Security Awareness Training Resources
- Appendix E: Other Web Resources and Links
- Security Awareness Posters
- Appendix F: Technical Tools That Can Be Used to Test Security Awareness Programs
- Appendix G: The Security Awareness Training Framework
- Appendix H: Building A Security Awareness Training Program Outline
- Appendix I: State Security Breach Notification Laws
- Appendix J: West Virginia State Breach Notification Laws, W.V. Code §§ 46A-2A-101 et seq
- Appendix K: HIPAA Breach Notification Rule
- Notification by a Business Associate
- Federal Trade Commission (FTC) Health Breach Notification Rule
- Appendix L: Complying with the FTC Health Breach Notification Rule
- Who's Covered by the Health Breach Notification Rule
- You're Not a Vendor of Personal Health Records If You're Covered by HIPAA
- Third-Party Service Provider
- What Triggers the Notification Requirement
- What to do If a Breach Occurs
- Who You Must Notify and When You Must Notify Them
- How to Notify People
- What Information to Include
- Answers to Questions About the Health Breach Notification Rule
- We’re an HIPAA Business Associate, But We Also Offer Personal Health Record Services to the Public. Which Rule Applies to Us?
- What’s The Penalty for Violating the FTC Health Breach Notification Rule?
- Law Enforcement Officials Have Asked us to Delay Notifying People About the Breach. Whatshould we Do?
- Where Can I Learn More ABout the FTC Health Breach Notification Rule? Visit www.ftc.gov/healthbreach.
- Your Opportunity to Comment
- Appendix L: Information Security Conferences
- Appendix M: Recorded Presentations on How to Build an Information Security Awareness Program
- Appendix N: Articles on How to Build an Information Security Awareness Program
Building an Information Security Awareness Program
Defending Against Social Engineering and Technical Threats
First Edition
Bill Gardner
Valerie Thomas
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.