Two security experts explain how to make awareness programs work: build an advisory board with communications, HR, and legal. These cross-functional relationships give you the resources and timing to run training without damaging anyone's reputation.
Man, hold on. Wait, one more time for the folks in the back. Say that again, Jason. I love, I love that. Say that one more time.
The, the advisory board thing?
Yeah.
It's something that I've, I've always like encouraged folks, but I think if you are, if you have a program and you don't currently have a program plan and you don't have an advisory team, I think your biggest, most efficient wins time and time again is to make relationships with, you know, Corp Comms for sure, HR for sure, because it'll affect training periods and stuff like that. And legal, if they're open to it, right? They might not want to provide the team, but if you can get them onto a steering committee, an advisory board, and you just say, here's what I want to do with my program for this year. I want to do this, this, and this. Here's where I need your support. And they see that and they can build, they can have the confidence that they're not going to look bad by doing it. And they give you a thumbs up. You unlock a superpower, right? With your program. I just don't think it, I don't think enough programs spend time making those relationships.
Yeah, I mean, I couldn't agree more. I think that we've seen the best success unlocked when that happens.