Making people wear the Security Awareness message
What if people could remind each other to do the simple things that reduce risk in a work environment? If it was able to stop one social engineering attack, one phishing attack, or one unauthorized person roaming the halls unchecked, what could that prevent in terms of potential losses?
As I continue to think of ways to improve security awareness, I sometimes come up with ideas that make sense (to me anyways). In many organizations where management already takes security seriously, access badges are required not only for employees to enter the building, but badges must be visible at all times in the facility. This makes it obvious if people aren’t authorized. If you aren’t wearing a badge, you should be challenged.
The majority of these organizations provide lanyards (those neck straps that hold the badges in front of the chest). Lanyards are often given away at trade shows for promotional purposes, since most people have to carry ID in the halls and seminar rooms. So, why not put the lanyards to good use (and make people feel silly at the same time - think Catbert, the evil HR Director)?
So, I took it upon myself to have some good quality lanyards created with concise, easy-to-recognize slogans related to Security Awareness for staff in the office environment.

Here’s a close-up…

Text reminders include: Close Programs, Back It Up, Log Out, Be Aware, Lock It Up, Avoid Unexpected Links, Challenge Strangers, Report Incidents.
Could a simple thing like this be enough of a trigger to keep security closer to the top of peoples’ minds?
If you are interested in finding out how to order them, please contact me by clicking HERE. (I’m getting to the point where I will have to set up a real e-commerce storefront for this stuff - stay tuned.)


Scott on 10 Nov 2007 at 11:34 am #
Following this post, I discovered a good discussion on the Security Catalyst Community forums (http://www.securitycatalyst.org/forums) which links to a story about how hackers are getting very good at tricking executives into clicking on e-mail links that contain things like warnings from The Better Business Bureau.
Anyone can fall victim to this type of scam if they don’t remember to follow the simple rules that will always be visible on these fine “Subliminal Security Lanyards”.