• Watch a preview of this course • Discover how to take this course: Online, In-Person sans.org/LDR433 LDR433: Managing Human Risk People have become the primary attack vector. Manage your human risk. Learn the key lessons and the roadmap to build a mature awareness program that will truly engage your workforce, change their behavior and ultimately manage your human risk. Apply models such as the BJ Fogg Behavior Model, AIDA Marketing funnel, and Golden Circle, and learn about the Elephant vs. the Rider. Concepts include how to assess and prioritize your top human risks and the behaviors that manage those risks, how to engage, train and secure your workforce by changing their behaviors and culture, and how to measure the impact and value of that change. The course content is based on lessons learned from hundreds of programs from around the world. You will learn not only from your instructor, but from extensive interaction with your peers. Finally, through a series of labs and exercises, you will develop your own custom plan to implement as soon as you return to your organization. Business Takeaways: • Align your security awareness program with your organization’s strategic security priorities • Effectively identify, prioritize and manage your organization’s top human risks. • More closely integrate your security awareness efforts with your security team’soverall risk management efforts. • Make the most of your investment by sustaining your program long term, going beyond changing behavior to embedding a strong security culture • Communicate and demonstrate the value of the change to your senior leadership in business terms Hands-On Training: A big part of the course is not only learning but applying what you learn working as groups with your peers. Not only does this provide you a far better understanding and application of course content, but enables you to interact and learn from others. This three section course has eight interactive labs. Each lab is approximately 30 minutes to complete as a team, with another 20-30 minutes of group discussion. • Section 1: Determine Your Program’sMaturity Level, Creating an Advisory Board, Identify and Prioritize the Top Human Risks to Your Organization • Section 2: Identify and Prioritize the Key Behaviors that Manage Your Top Human Risks, Leverage the AIDA Model to Sell MFA, Putting it All Together, Creating an Engagement Plan • Section 3: Define Your Organization’sCulture, Measuring a Key Human Risk and Behaviors that Manage that Risk Additional Free Resources • Security Awareness Roadmap: Managing Your Human Risk, poster • Annual Security Awareness Report™: Managing Human Risk • Career Developoment for Security Awareness, Engagement, and Culture Professionals (For those of you who are looking to get involved in this field, or are already involved but looking to grow, consider reading this blog on how to develop your career path. This Course Will Prepare You to: • Master how to map and benchmark your program’s maturity against your peers’ • Understand the Security Awareness Maturity Model and how to leverage it as the roadmap for your program • Ensure compliance with key standards and regulations • Implement models for learning theory, behavioral change, and cultural analysis • Define human risk and explain the three different variables that constitute it • Explain risk assessment processes • Leverage the latest in Cyber Threat Intelligence and describe the most common tactics, techniques, and procedures used in today’s human-based attacks • Identify, measure, and prioritize your human risks and define the behaviors that manage those risks • Define what security culture is and the common indicators of a strong security culture • Explain your organization’s overall culture and how to most effectively align cybersecurity with and embed into your organization’sculture • Measure the impact of your program, track reduction in human risk, and how to communicate to senior leadership the value of the program 3 Day Course 18 CPEs Laptop Not Needed SSAP Secururity Awareness Professional giac.org/ssap “ I think the course is really engaging and works at two levels: (1) It would provide someone starting out with a solid foundational knowledge, (2) It allows an existing program to benchmark and get new ideas, to supplement the existing work.” — Brian Wright, Student Loans Company Unlimited