HRM-CORE-10Term
Security awareness
A person's ability to recognize and avoid behaviors that could compromise cybersecurity and to act wisely and cautiously (NIST SP 800-50r1). Awareness is one input to human risk; a program that builds it is an awareness program.
Example
A new hire recognizes a QR-code lure on a parking sign and walks past; that recognition is awareness.
Also called
4How analysts, standards and vendors name the same idea.
- awarenessNIST SP 800-50r1
- cyber security awarenessENISAAn ongoing process of learning with measurable benefits from lasting behavioral change; a subset of security culture.
- security awareness programCIS Controls v8.1Control 14.1: the activity, where awareness is the ability.
- security awareness and training (SA&T)ForresterThe legacy market.
Sources
4Related terms
3"Security awareness" (HRM-CORE-10), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/security-awareness
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.