The outsourcing and ROI of security awareness training

The outsourcing and ROI of security awareness training

Having security policies are great, but it doesn't help if the employees are not aware of them. To properly enforce these policies, the company should provide security awareness training.

Can you please tell me who in the company decides to invest in outsourced employee security awareness training? Is it the CIO, CSO, HR Manager or the CEO? Do they expect a measurable return on investment?


    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

I agree with your opening statement that security awareness training is needed. Within the Government Agency that I support, such training is mandated on an annual basis for all employees and contractors.

As for who invests, the answer would be whomever controls the security budget. In many cases executives are looking for a measurable ROI for all security expenditures. I personally think that is the wrong approach. Security expenses should be looked at more so as an insurance policy: What are the potential losses that are avoided by spending money on security? Awareness training is just another valid expenditure in that area.


For more information on this topic, visit these other SearchSecurity.com resources:
  • News & Analysis: Quantifying security ROI hefty challenge for IT
  • News & Analysis: Measuring security ROI a tall order
  • Best Web Links: Budgeting for security
  • News & Analyis: Security on the cheap


    This was first published in March 2003