 |

|
Symantec: Training program upgrade can reduce risks 
9 March, 2009 By Steve Wexler |

LAS VEGAS: The IT threat environment continues to challenge organizations and with the economy straining security budgets, staff training is becoming even more critical, says Symantec Corp., which has announced a new version of its Security Awareness Program. The latest version of the employee training program can help organizations 'protect against data breaches, demonstrate regulatory compliance and reduce risks associated with employee behavior that could negatively impact their brand reputation.
Security personnel are facing unprecedented times that include shrinking resources and a highly sophisticated threat environment targeting all types of information, noted Shelley Olson, vice president and general manager, Symantec Education Services, in the product announcement.
Today's security environment is growing more complex, stated Irida Xheneti, Security Services research analyst, IDC Research. "With todays open IT infrastructure, along with increased use of social networking and Web 2.0 applications within the enterprise, employees have unconsciously become the ultimate security back door and target of many silent attacks that expose organizations to data loss. Through a comprehensive security awareness program, organizations can build awareness around internal security vulnerabilities, proactively enable their employees to carefully consider the security implications of their online activities and ultimately strengthen risk management policies."
Symantec also quoted a study from the Ponemon Institute that found that more than 88 percent of all data breach cases in 2008 involved insider negligence and that the associated costs are fising. The U.S. Cost of a Data Breach Study examined 43 organizations across 17 industry sectors and found that the average total cost per reporting company was more than $6.6 million per breach and that more than half of the respondents believe that training and awareness programs assist in preventing future breaches.
It's a good and necessary move, said Michelle Warren, president of MW Research & Consulting. The relatively newer generation of social networkers need to know what they're potentially exposing their corporate networks. Plus it's useful in their personal lives too, she added. Other benefits include reinforcing the value of the IT manager's position and increasing Symantec's branding awareness.
"As a channel friendly organization, the benefits are far reaching," she said. "It gives the VARs something new to say to their corporate accounts."
Enhancements to the Security Awareness Program include: the ability to customize the program to address any audience, industry or geography; an updated curriculum; and a new format which allows customers to focus on key areas most relevant to their organization. Additional new features include: improved user interface with more graphics, searchable transcripts allowing users to quickly search and review key topics with ease, and online syndicated content to help organizations create a unique touch point for security information on their own website.
Finally, an optional Payment Card Industry Data Security Standard (PCI DSS) module will help customers train their employees on the type of customer financial information that needs to be protected, and the requirements that must be enforced any time a credit card number is stored, processed or transmitted.
For more information visit http://www.symantec.com/business/services/category.jsp?pcid=education_services.
|
 |