Awareness is an important part of any higher education information security program, and many institutions dedicate an individual to security awareness efforts. How do institutions identify appropriate candidates for this role? How do institutions determine the appropriate qualifications for a successful security awareness professional? What types of educational backgrounds best prepare these professionals? How do security awareness professionals stay current with respect to communications skills, learning pedagogy, and information security issues? In the second half of 2015, the Higher Education Information Security Council (HEISC) Awareness and Training Working Group conducted a survey of security awareness professionals. The research took a two-phased approach: surveying security awareness professionals (and IT communications professionals) and then leveraging the combined expertise of these professionals to provide a rich online resource list of continuing education opportunities.
Citation for this Work: Woelk, Ben. The Successful Security Awareness Professional: Foundational Skills and Continuing Education Strategies. Research bulletin. Louisville, CO: ECAR, August 10, 2016