- [Instructor] Humans are always the weakest link
in the chain when security is involved.
The most effective means of mitigating the human factor
is education and frequent testing.
As per Cisco, an effective security program
has three basic elements.
First, user awareness.
Second, user training.
And last, physical access control.
User awareness is a fairly straightforward topic.
It's really about making them aware
of potential threats and dangerous behaviors
like protecting their personal information,
protecting their passwords,
commons ways attackers try to solicit this information,
common threats, and what procedures they take
when they believe that there is an issue.
User training is another common sense step.
A company should publish a security policy
that users must not only read,
but be trained with and be tested against.
Last is physical access control.
This is making any key locations
like network and server closets as secure as possible.
Best practice would be to use some badge access system
to keep an accountability trail
for users accessing these spaces.
While this chapter may seem like common sense
to most people, it won't be to everyone,
which is why training is so crucial.