Employee Training and Awareness

This paper from Carnegie Mellon discusses potential ways an insider threat program could go wrong.

This toolkit contains resources to help you perform your role in the insider threat field.

This webpage provided by CISA will help individuals, organizations, and communities create or improve an existing insider threat mitigation program.

This guide provides direction for implementing the basic building blocks of an insider threat program.

This Framework is designed to help optimize insider threat program capabilities.

This security training from the HHS is an example of requirements and guidance to provide appropriate role-based security training.

The purpose of this example procedure from the EPA is to help with implementing the security control requirements for the Awareness and Training (AT) control family.

This NIST Special Publication provides guidance for building an effective security program.

Proofpoint Security Awareness Training is offering a free Phishing Awareness Kit. This kit gives you the tools you need to engage your users and turn them into a strong line of defense against phishing attacks and other cyber threats.

This SANS whitepaper describes how to successfully implement a comprehensive Security Training, Awareness, and Education program.

This document is an example of an Acceptable Use for System Administrators Policy from the University of Arizona.

Collection of cyber training courses and training aids provided by the DoD Cyber Exchange. It provides an overview of cybersecurity threats and best practices to keep information and information systems secure. 

KnowBe4 is a large security awareness training and simulated phishing platform that helps you manage the ongoing problem of social engineering.

This resource provides general awareness and role-based information security training documents.