ABSTRACT

A validated security program has value only if it is applied and endorsed by all in the organization. To achieve this, the security manager should conceive and implement a security maintenance program. Several good books have been written on the subject. In this chapter, I will mainly discuss security awareness, which is the main tool to maintain your security program, as well as training, audits, and who should complement your maintenance actions. I will discuss different awareness programs that I have experienced with success and mention others that I was never able to implement, though in theory they appear very sound. Then I will emphasize the importance of training your guard force and highlight the necessity of regular security audits.