Question

What types of training will you provide for a local credit company ( SA Program Plan)? For instance, a phishing email awareness can be done through online video training for the employees.

Answer 1

We can provide different types of trainings. Few examples are listed below:

1. Clean Desk Policy : We can make employees aware to not leave sensitive information scattered carelessly on their workspace. We can teach them to manage sensitive information in appropriate manner.

2. Data Management : We should make our employees aware about the different types of data in an organisation and ways to manage classified data.

3. Safe Internet Habits : As given in the question we can train our employees again the safe internet habits so that they can be safe from data breach and other cyber hazards.

4. Email scams : We should make our employees aware against fraudulent emails.

5. Malware : A training session on malware should illustrate malware types and their implications. Malware types should include adware, spyware, viruses, Trojans, backdoors, rootkits, ransomware, botnets, logic bombs and armored viruses. Employees should learn how to identify malware and what to do if their device or network has been infected. The immediate response should be to turn off the system or device and inform the security management team.

6. Password security : Employees should be trained to manage their password carefully to protect the system breach due to physical and non physical aspects of environment.