Anytown USA Bank prides itself on being very responsive to itscustomers. It offers a 24-hour staffed customer care center with atoll-free number. Over the past year, there has been a significantdecline in calls and a corresponding increase in email servicerequests. As Information Security Officer (ISO), you are veryconcerned that customerinformation classified as “protected” isbeing sent via email or email attachments. You have requested ameeting with the Director of IT to explore “secure email” optionssince regular email is sent across the Internet in plain text. Inthe meantime, you want to make sure that employees understand thedanger of using regular email.
1. Working with the training department, you are going to launcha security awareness campaign. The theme is “Email = Postcard.” Themessage is that users should never write anything in an externalemail that they wouldn’t write on a postcard.
a. Create a security awareness campaign focused on this topic.Include in this plan specifics on how you intend to deliver themessage.
b. Create at least one piece of supporting collateral.
c. Design a way to test the effectiveness of your message.
2. Before launching the campaign, you want to make sure you havethe full support of the executive management.
a. What type of “educational” program would you develop formanagement?
b. What would the message be?
3.Outline the SETA program that will be needed to ensure thesuccess of the “secure email” application.
