[Pauldotcom] Security Awareness Training for SysAdmins

[Jorge A. Orchilles]

Hello all,

I was asked to put together an outline for a security awareness
training/talk/presentation aimed at system and network admins. I would like
to show examples and make it fun. Here are my thoughts so far but would like
to see if any of you have done this, have resources to point me to, and/or
feedback on what I have so far:

   - Password construction/management
      - Show online password lists for default passwords
      - Examples of bruteforcing and cracking
      - Emphasis on having strong and different passwords for each system
      - Policy
   - Online postings related to work
      - Social networks
      - Mailing lists
      - Vendor sites/forums
   - Following best practices
      - SANS SCORE
      - Vendor recommendations
      - Think of the data

Thanks in advance,
Jorge Orchilles
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100421/0f0308ce/attachment.htm