CISM Certified Information Security Manager Study Guide Quotes

“responsibilities and then use annual refresher training to cover the same material and update users on new threats and controls. The team responsible for providing security training should review materials on a regular basis to ensure that the content remains relevant. Changes in the security landscape and the organization's business may require updating the material to remain fresh and relevant.”
― Mike Chapple, CISM Certified Information Security Manager Study Guide

“Information security managers are responsible for establishing, promoting, and maintaining an information security training and awareness program to foster an effective security culture in their organizations.”
― Mike Chapple, CISM Certified Information Security Manager Study Guide