23 Jun 2005
I wrote this white paper as an extended response to a simple question on the Yahoo groups Security Awareness mailing list. Someone simply asked for sources of posters and other materials for security awareness ... I responded by inviting him to think more broadly about his requirements for the awareness program, and to plan the program more professionally rather than, as he possibly implied, just putting up a few free or cheap posters. The response turned into a short white paper about the process for planning, selecting, evaluating and procuring security awareness products and services - really just the standard procurement process applied to security awareness. Enjoy.