Describe a plan for implementing the security awareness program. You have identified 3 distinct activities below:

first activity: safety of confidential data or sensitive data

second: Establish an intranet system for internal access and testing to prevent anyone from leaking data from inside the company.

third:  Develop regular training sessions 

For each section of the plan, discuss what should happen to roll that area out, what the subtasks are, what deliverables should be created, and what success will look like.

 

We can use bank as an example for the 3 distinctive activities for implementing the security awareness program

1. Safety of confidential or sensitive data - personal identifiable information or pii is any data that can be used to identify an individual is a very sensitive data that must be protected. Bank employees must know how to protect their customer pii data as it contains valuable information to the customer such as birthday, account number, contact details etc. They must ensure that these data cannot be shared outside the bank so that it cannot be used by some individual who might perform identity theft. An employee who will fail to protect data should be subject for termination.
2. Establish an intranet system for internal access and testing to prevent anyone from leaking data from inside the company. - A good security matrix access to identify who are the users that are authorize to access the intranet the system . Let say a branch manager can be the only one who can access this and other than the manager cannot access the system.
3.  Develop regular training sessions - A training can be conducted regularly for all the employees to ensure that the awareness program is still on their mind. Training can be provided through face-to-face session or thru online on a monthly basis. Also, they can conduct training for those newly onboarding personnel.