Information Security and Privacy Training and Awareness for Business Partners: Their Lack of Knowledge Will Be Your Pain

by Rebecca Herold

In Part I of this three-part Executive Update series, ¹ I covered why smart business leaders need to provide their personnel with regular training about information security and privacy as well as ongoing awareness communications. In Part II, ² I described 14 mistakes that organizations consistently make that undercut training and awareness programs, which are often detrimental to information security and privacy efforts. I have seen the majority of organizations make a 15th mistake, which I will cover in-depth in this third and final Update. That mistake is not providing information security or privacy training and ongoing awareness to outsourced vendors and business partners.