Information Systems Security (INFOSEC) Education, Training, and Awareness
Abstract
A key responsibility assigned by the "National Policy for the Security of National Security Telecommunications and Information Systems," dated 5 July 1990, is to ensure the development and implementation of a comprehensive approach to protect U.S. Government national security information systems. The success of this program depends not only on the technical implementations of policies, but also on the integration of human interfaces with automated systems. Education, training, and awareness are countermeasures that effectively reduce exposure to a variety of known risks. In order to achieve this end, it is essential to have a federal work force that is aware of' and educated about, the problems of information systems security (INFOSEC). This directive is issued in response to the national policy and establishes the requirement for federal departments and agencies to develop and implement INFOSEC education, training and awareness programs. This directive supersedes NTISS Directive No. 500, "Telecommunications and Automated Information Systems Security Education, Training, and Awareness," dated 8 June 1987.
Document Details
- Document Type
- Technical Report
- Publication Date
- Feb 25, 1993
- Accession Number
- ADA362604