Security Awareness Training is defined as a method to notify KSU technology users about the importance of protecting information technology resources and systems. Security Awareness Training is also a method to notify KSU technology users about the importance of protecting information technology resources and systems. Security Awareness Training also teaches security key concepts and best practices, such as creating a strong password, following IT Security policies, and reporting security incidents.

PROCESS:

All user of KSU's information resources and systems must have an understanding of the risks associated with using technology and how to effectively defend against cyber threats, both at work and at home. As a result, these users will be required to complete security awareness training which includes knowledge of Kentucky State University's (KSU) information security policies and procedures upon hire and annually thereafter.

In addition to annual training, continuous education such as website information, email messages, and other means will be used. KSU reserves the right to conduct unscheduled awareness assessments to ensure compliance.

ENFORCEMENT

Any individual who violates this policy may result in disciplinary action including but not limited to termination, loss of data access privileges, administrative sanctions, and personal civil and criminal liability.

Any employee or student who interferes with or refuses to cooperate in the investigation of a violation of this policy may be subject to disciplinary action including but not limited to termination, loss of data access privileges, administrative sanctions, and personal civil and criminal liability.

REFERENCES AND RELATED MATERIALS:

• KSU Data Classification Policy
• KSU Data Security Controls Regulation
• KSU Data Access Management Regulation
• KSU Data Backup and Disaster Recovery Regulation

CONTACTS:

HISTORY: