chapter  4
20 Pages

Incorporating Training and Awareness into Job Responsibilities and Appraisals

Every organization struggles to have personnel follow good information security and privacy practices. Generally, this is because most personnel do not like to jump through the perceived hoops that good security and privacy often require, and there is usually no motivation for them to perform security and privacy activities and no consequences to face when they do not comply with the organization’s information privacy, security, and compliance rules.