Information Security Awareness Training

Information security awareness training and cyber security training are used interchangeably, and the first is genuinely broader.

Cyber covers digital systems. Information security covers the information itself, wherever it lives.

That includes things no firewall touches. Printed documents left on a desk or in a shared printer. Client details discussed in a lift, a cafe or on a train. Files taken home on a USB drive. Screens visible from a public area or on a laptop in an airport. Physical access to an office by someone nobody challenged.

For organisations holding sensitive personal information, health records, employee files or client financials, these are not minor. They are frequently the easiest route in and the least monitored.

Training that covers only email leaves all of it uncovered.

The Australian Cyber Security Centre publishes guidance for organisations. This is general information rather than legal advice, and obligations vary by state and territory.

See Sentrient’s privacy training course and records management software.