1
00:00:00,090 --> 00:00:01,230
In this section of the course

2
00:00:01,230 --> 00:00:03,510
we're going to be discussing security awareness.

3
00:00:03,510 --> 00:00:04,770
Now, security awareness refers

4
00:00:04,770 --> 00:00:06,030
to the knowledge and understanding

5
00:00:06,030 --> 00:00:07,170
that individuals possess

6
00:00:07,170 --> 00:00:09,330
regarding potential security threats and the measures

7
00:00:09,330 --> 00:00:11,550
that can be taken to mitigate or prevent them.

8
00:00:11,550 --> 00:00:13,560
Our primary goal of security awareness training

9
00:00:13,560 --> 00:00:15,660
is to equip individuals with the necessary skills

10
00:00:15,660 --> 00:00:17,010
and knowledge to recognize

11
00:00:17,010 --> 00:00:18,690
and respond to these security threats,

12
00:00:18,690 --> 00:00:20,520
and ultimately to protect both personnel

13
00:00:20,520 --> 00:00:23,310
and organizational data from those security threats.

14
00:00:23,310 --> 00:00:25,110
Now, in our increasingly digital world,

15
00:00:25,110 --> 00:00:26,730
cyber threats are always evolving

16
00:00:26,730 --> 00:00:28,648
and attackers are continuously devising new methods

17
00:00:28,648 --> 00:00:30,870
to exploit vulnerabilities.

18
00:00:30,870 --> 00:00:32,640
Phishing emails, malware attacks,

19
00:00:32,640 --> 00:00:33,930
and social engineering schemes

20
00:00:33,930 --> 00:00:35,430
are just a few of the many techniques

21
00:00:35,430 --> 00:00:37,440
this cyber criminals could employ.

22
00:00:37,440 --> 00:00:39,412
While technical robust defenses are vital,

23
00:00:39,412 --> 00:00:40,920
human error remains

24
00:00:40,920 --> 00:00:42,450
one of the most significant vulnerabilities

25
00:00:42,450 --> 00:00:44,280
inside of our enterprise networks.

26
00:00:44,280 --> 00:00:46,230
So by the end of this section,

27
00:00:46,230 --> 00:00:48,270
you should be able to understand the common threats,

28
00:00:48,270 --> 00:00:49,817
recognize potential risks, and have a clearer idea

29
00:00:49,817 --> 00:00:52,440
of the best practices that you can employ

30
00:00:52,440 --> 00:00:54,090
in your daily digital interactions

31
00:00:54,090 --> 00:00:56,130
to maintain a more secure environment.

32
00:00:56,130 --> 00:00:57,570
Now, in this section of the course,

33
00:00:57,570 --> 00:00:59,580
we'll be focused solely on domain five

34
00:00:59,580 --> 00:01:01,890
and only on objective 5.6.

35
00:01:01,890 --> 00:01:04,470
Objective 5.6 states that given a scenario

36
00:01:04,470 --> 00:01:06,898
you must be able to implement security awareness practices.

37
00:01:06,898 --> 00:01:10,860
First, we're going to discuss how to recognize insider threats.

38
00:01:10,860 --> 00:01:13,320
An insider threat is a security risk that originates

39
00:01:13,320 --> 00:01:16,380
from individuals within an organization like your employees,

40
00:01:16,380 --> 00:01:19,320
former employees, contractors, or business partners.

41
00:01:19,320 --> 00:01:21,480
These individuals have inside information

42
00:01:21,480 --> 00:01:23,640
concerning the organization security practices,

43
00:01:23,640 --> 00:01:25,080
data and computer systems,

44
00:01:25,080 --> 00:01:26,730
and they could exploit this information

45
00:01:26,730 --> 00:01:29,910
to harm the organization intentionally or unintentionally.

46
00:01:29,910 --> 00:01:32,580
Next, we're going to take a look at password management.

47
00:01:32,580 --> 00:01:35,130
Now, password management refers to the practices and tools

48
00:01:35,130 --> 00:01:37,410
that are used to create, store, and manage passwords

49
00:01:37,410 --> 00:01:39,600
for various online accounts and systems.

50
00:01:39,600 --> 00:01:40,860
Proper password management

51
00:01:40,860 --> 00:01:42,480
will ensure that passwords are strong,

52
00:01:42,480 --> 00:01:44,700
unique for every account and stored securely,

53
00:01:44,700 --> 00:01:46,590
and this will in turn reduce the risk

54
00:01:46,590 --> 00:01:48,270
of unauthorized access.

55
00:01:48,270 --> 00:01:49,710
Then we'll discuss how you can avoid

56
00:01:49,710 --> 00:01:51,000
social engineering attacks,

57
00:01:51,000 --> 00:01:52,710
including techniques like maintaining good

58
00:01:52,710 --> 00:01:55,230
situational awareness so you can avoid shoulder surfing

59
00:01:55,230 --> 00:01:56,250
and eavesdropping,

60
00:01:56,250 --> 00:01:58,020
as well as avoiding using removal mode media

61
00:01:58,020 --> 00:01:59,730
and cables that don't belong to you,

62
00:01:59,730 --> 00:02:01,170
and how to avoid phone scams

63
00:02:01,170 --> 00:02:03,030
and people trying to get information out of you,

64
00:02:03,030 --> 00:02:05,100
and how you can maintain good operational security

65
00:02:05,100 --> 00:02:07,140
across your entire organization.

66
00:02:07,140 --> 00:02:09,810
After that, we'll discuss policies and handbooks.

67
00:02:09,810 --> 00:02:12,720
Now, policies are formal documented guidelines or rules

68
00:02:12,720 --> 00:02:14,400
that define how an organization operates

69
00:02:14,400 --> 00:02:15,900
and makes its decisions.

70
00:02:15,900 --> 00:02:16,920
They're going to provide a framework

71
00:02:16,920 --> 00:02:18,720
for consistent decision making and actions

72
00:02:18,720 --> 00:02:20,580
on specific issues or topics.

73
00:02:20,580 --> 00:02:22,770
Handbooks, on the other hand, are comprehensive guides

74
00:02:22,770 --> 00:02:24,627
that provide information on specific topics,

75
00:02:24,627 --> 00:02:26,730
and they often serve as a reference for individuals

76
00:02:26,730 --> 00:02:28,230
within the organization.

77
00:02:28,230 --> 00:02:30,780
For example, you may have gotten an employee handbook

78
00:02:30,780 --> 00:02:32,850
that outlines the company's policies, procedures,

79
00:02:32,850 --> 00:02:34,740
and their expectations of you.

80
00:02:34,740 --> 00:02:36,750
Next, we're going to explore the world of remote

81
00:02:36,750 --> 00:02:38,280
and hybrid work environments.

82
00:02:38,280 --> 00:02:40,350
Now, remote work refers to a work arrangement

83
00:02:40,350 --> 00:02:42,210
where employees can perform their job functions

84
00:02:42,210 --> 00:02:44,190
outside of the traditional office environment,

85
00:02:44,190 --> 00:02:46,650
and most often this is called work from home

86
00:02:46,650 --> 00:02:48,840
or working from another remote location

87
00:02:48,840 --> 00:02:50,010
by leveraging technology,

88
00:02:50,010 --> 00:02:51,870
and other things like the internet.

89
00:02:51,870 --> 00:02:53,190
Hybrid work, on the other hand,

90
00:02:53,190 --> 00:02:55,680
is a model that combines traditional in-office work

91
00:02:55,680 --> 00:02:56,760
with remote work.

92
00:02:56,760 --> 00:02:58,470
Employees in a hybrid work model,

93
00:02:58,470 --> 00:03:00,083
may spend part of their work week in the office

94
00:03:00,083 --> 00:03:02,490
and then they'll spend the rest of it working remotely,

95
00:03:02,490 --> 00:03:05,280
and this offers them a good blend of both environments.

96
00:03:05,280 --> 00:03:07,170
Then we'll discuss how you can create a culture

97
00:03:07,170 --> 00:03:08,970
of security in your organization.

98
00:03:08,970 --> 00:03:09,990
Now, a culture of security

99
00:03:09,990 --> 00:03:11,880
refers to an organizational mindset

100
00:03:11,880 --> 00:03:14,520
where every member of the organization prioritizes security

101
00:03:14,520 --> 00:03:16,140
inside of their daily tasks

102
00:03:16,140 --> 00:03:17,684
and their decision-making processes.

103
00:03:17,684 --> 00:03:19,380
In this kind of a culture,

104
00:03:19,380 --> 00:03:22,080
individuals are continually educated about potential threats

105
00:03:22,080 --> 00:03:24,720
and they're proactive in taking steps to mitigate risks.

106
00:03:24,720 --> 00:03:27,090
The emphasis here is on a collective responsibility

107
00:03:27,090 --> 00:03:30,570
to protect the organization's data, assets and reputation.

108
00:03:30,570 --> 00:03:32,310
And then finally, we'll take a short quiz

109
00:03:32,310 --> 00:03:34,230
to see what you learned during this section of the course

110
00:03:34,230 --> 00:03:36,060
and review each of those quiz questions fully

111
00:03:36,060 --> 00:03:37,710
to ensure you can explain every answer

112
00:03:37,710 --> 00:03:39,780
and why it was right or why it was wrong.

113
00:03:39,780 --> 00:03:42,390
So if you're ready, let's get started in our training

114
00:03:42,390 --> 00:03:43,800
on security awareness practices

115
00:03:43,800 --> 00:03:45,300
in this section of the course.