Peer to Peer Magazine

14 PEER TO PEER: THE QUARTERLY MAGAZINE OF ILTA | SPRING 2018 BEST PRACTICES Your Recipe for a Delectable Security Awareness Program Security awareness programs can sometimes seem about as enticing as three-day leovers, but, when prepared the right way, those leovers can turn into a gourmet meal, complete with appetizer and dessert. Creating something that appeals to people across diverse roles, geography and generations has its challenges. Having one set menu that satisfies everyone does not always work. By knowing your people and preparing security elements that feed them what they need, they will feel strengthened and satiated. Many security awareness programs contain a dash of policy, a pinch of technology and a handful of education — the beginnings of a successful recipe. What programs oen miss are a few core ingredients and special seasonings that take a meal from edible to delectable. To bring about a change in behavior, make people the core ingredient, and then steep the program in our secret sauce: a blend of sponsorship, coalitions, relevance, metrics, media, marketing and perspective. Sponsorship The role of the sponsor is to clarify (separate and remove the lumps) why this program is essential. This message should come from someone influential at the highest level of the firm. When awareness programs are sponsored by C-level leadership who are active and visible, they are more successful in bringing about meaningful changes in behavior. It is important that your security program is viewed as a business initiative. Coalitions By emulsifying (mixing two or more items together that do not usually combine), we enhance the overall program and create something more flavorful. Elements of compliance oen overlap, so building strong relationships between the technology, marketing, knowledge management, human resources and professional development departments is a critical step in preparing a succulent security awareness program. When developing the "what is in it for me?" message, coalition members on change teams are instrumental in managing the people side of change. The difference between checking a compliance box on a security audit and implementing a program that instills a strong security culture is similar to the difference between sustenance and nutrition: one keeps you alive, the other helps you thrive. by Carolyn Humpherys and Eileen Whitaker Your Recipe for a Delectable Security Awareness Program CAROLYN HUMPHERYS Carolyn Humpherys is a learning development consultant and senior instructional designer at Traveling Coaches. Co-recipient of the ILTA 2016 Consultant of the Year award for her role as co-architect of the Springboard Certified Legal Trainer Program, Carolyn helps law firm trainers, helpdesk teams and security awareness specialists drive change within their organizations. EILEEN WHITAKER Eileen Whitaker, senior learning and change management consultant at Traveling Coaches, is a virtual learning expert, the Springboard Consulting team lead, co-creator of the award-winning Certified Legal Trainer Program and winner of ILTA's 2016 Distinguished Peer Award for Innovative Consultant of the Year.

• Cover