Setting up an Effective Information Security Awareness Programme

The security group of a large insurance company in Belgium wanted to set-up and conduct a successful security awareness programme for all employees. Before designing the programme, the group performed field research (including discussing with security peers) into what constitutes a successful awareness programme. The security group also made an inventory of available awareness material, both internally (within the company and the group to which the company belongs) and externally. Based on the various input received a conceptual approach for an effective security awareness programme was drafted on which the insurance information security awareness programme was built. Measuring the results of the programme proved that the approach was effective.