Building and Measuring Security Awareness

This unit guides learners through designing, implementing, and measuring a comprehensive, people‑centric security awareness program that addresses social engineering, physical security, malware threats, branding, gamification, and incident response. Learners will translate human factors principles and Day 0 baseline metrics into management reporting, responsive interventions, and a runnable course for their organization.

Learning Objectives

• Analyze baseline (Day 0) and ongoing metrics to identify trends, measure early wins, and prioritize security awareness interventions
• Apply human factors and social engineering principles to design people‑centric content and activities, including physical security scenarios and real gamification elements
• Demonstrate the ability to develop and run a branded security awareness program course that highlights real incidents, addresses repeat offenders, and integrates the organization’s mission
• Evaluate incidents, breaking news, and stakeholder needs to produce clear management reports and responsive communications that build program credibility