What are the various ways to inform employees about information security policies and procedures?
Anyone in IT leadership responsible for establishing and maintaining company policy and procedures for security needs to ensure that there's a system in place for monitoring corporate computers and mobile devices to protect against email viruses, malware, and data breaches. You'll find that hiring managers tend to spend a bit more time on this question because they want to gauge your level of confidence on how you implement these practices across the company and how you communicate the procedures to all employees. It's not uncommon for a manager to ask you to talk about communicating effective ways to identify phishing emails, transferring confidential files securely, password management tips, and applying privacy and security updates for all employees.
"If you look at statistics on how attacks were established. You will find that over 50% of attacks came from employees within a company that inadvertently allowed access to a hacker, or simply disregarded company security policy. At my last company, I was directly involved in writing the security policies and procedures, as well as setting guidelines and conducting training sessions with employees to teach them to detect phishing emails and similar scams. I demonstrated in detail what a phishing email looks like, what to look for when they receive one, and the procedure to follow once this type of scam is identified. I created an email account so that anyone who received these phishing emails, l could send them straight to that account."
"During my security training sessions with employees, I explained the importance of cyber security and pointed out the risks of an attack and the negative impact it could have on our organization if personal employee or company information is compromised. As part of the training sessions, I discussed in detail the use of and management of strong passwords, and how to use unique characters when selecting new passwords. As a way of making sure all employees were adhering to our security policies, I set quarterly reminders for everyone to change their passwords. I also had everyone apply updates to their systems and privacy settings."
Since communication is a key sauce skill hiring managers look for in prospective employees, you can use this question to demonstrate your skills in this area. A good way to respond would be by relating an experience you had with a previous employer in which you communicated the organization's cyber security policies and procedures and how important was to adhere to these. The experience you share with the manager will be a reflection of your capabilities and may IP show that you can think outside the box. This helps the manager see the level of detail you go through to protect your company's information security assets and employees.
Unlock all 47 Cyber Security questions
Prepare for technical scenarios and security assessments that interviewers prioritize.
Get Started