- Cover image
- Title page
- Table of Contents
- Copyright
- Dedications
- Forewords
- Preface
- About the Authors
- Acknowledgments
- Chapter 1: What Is a Security Awareness Program?
- Chapter 2: Threat
- Chapter 3: Cost of a Data Breach
- Chapter 4: Most Attacks Are Targeted
- Chapter 5: Who Is Responsible for Security?
- Chapter 6: Why Current Programs Don't Work
- Chapter 7: Social Engineering
- Chapter 8: Physical Security
- Chapter 9: Types of Training
- Chapter 10: The Training Cycle
- Chapter 11: Creating Simulated Phishing Attacks
- Abstract
- Simulated Phishing Attacks
- Understanding the Human Element
- Methodology
- Open-Source Tool, Commercial Tool, or Vendor Performed?
- Before You Begin
- Determine Attack Objective
- Select Recipients
- Select a Type of Phishing Attack
- Composing the E-mail
- Creating the Landing Page
- Sending the E-mail
- Tracking Results
- Post Assessment Follow-up
- Chapter 12: Bringing It All Together
- Chapter 13: Measuring Effectiveness
- Chapter 14: Stories from the Front Lines
- Appendices
- Appendix A: Government Resources
- Appendix B: Security Awareness Tips
- Appendix C: Sample Policies
- Appendix D: Commercial Security Awareness Training Resources
- Appendix E: Other Web Resources and Links
- Security Awareness Posters
- Appendix F: Technical Tools That Can Be Used to Test Security Awareness Programs
- Appendix G: The Security Awareness Training Framework
- Appendix H: Building A Security Awareness Training Program Outline
- Appendix I: State Security Breach Notification Laws
- Appendix J: West Virginia State Breach Notification Laws, W.V. Code §§ 46A-2A-101 et seq
- Appendix K: HIPAA Breach Notification Rule
- Notification by a Business Associate
- Federal Trade Commission (FTC) Health Breach Notification Rule
- Appendix L: Complying with the FTC Health Breach Notification Rule
- Who's Covered by the Health Breach Notification Rule
- You're Not a Vendor of Personal Health Records If You're Covered by HIPAA
- Third-Party Service Provider
- What Triggers the Notification Requirement
- What to do If a Breach Occurs
- Who You Must Notify and When You Must Notify Them
- How to Notify People
- What Information to Include
- Answers to Questions About the Health Breach Notification Rule
- We’re an HIPAA Business Associate, But We Also Offer Personal Health Record Services to the Public. Which Rule Applies to Us?
- What’s The Penalty for Violating the FTC Health Breach Notification Rule?
- Law Enforcement Officials Have Asked us to Delay Notifying People About the Breach. Whatshould we Do?
- Where Can I Learn More ABout the FTC Health Breach Notification Rule? Visit www.ftc.gov/healthbreach.
- Your Opportunity to Comment
- Appendix L: Information Security Conferences
- Appendix M: Recorded Presentations on How to Build an Information Security Awareness Program
- Appendix N: Articles on How to Build an Information Security Awareness Program
Dedications
This book is dedicated to the love of my life and my best friend Blair Gardner and to my sister Kim Gardner.
Bill Gardner
This book is dedicated to my family Chad, Andrew, and Lily and my grandmother Laura who inspired my love of reading.
–Valerie Thomas
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.