Advanced Persistent Training: Take Your Security Awareness Programme to the Next Level

Many Information Security professionals are required by regulation or policy to provide Security Awareness training within the companies they work for, but many believe that the resulting low compliance with training does not outweigh the costs of delivering that training. There are also many who believe that this training is crucial, if only it could be more effective. This book is for them. The answer to low compliance rests in the heart of the very Awareness vs. Compliance problem: people are human. People have incredible strengths and incredible weaknesses, and Information Security professionals need to recognize and devise training strategies that take advantage of both. Advanced Persistent Training looks at how Security Awareness programmes can work with people by using behavioural modification and coaching techniques in order to efficiently achieve measurably higher levels of compliance, engagement, and effectiveness.

Jordan Schroeder is a former department head at a technical school and corporate trainer. As an information security expert and a moderator of the Security.StackExchange.com forum, he is dedicated to researching and delivering effective and innovative methods to teach professionals and laypeople alike how to digitally secure their organizations and the assets they control. Jordan developed and runs SelfPhish, a phishing education and research platform aimed at discovering an individual's vulnerability to different types of social engineering attacks, then tailoring Security Awareness training to that individual.