Computer Security Training Guidelines

Published

November 1, 1989

Author(s)

Mary A. Todd, Constance Guitian

Abstract

[Superseded by SP 800-16 (April 1998): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151633] This guideline provides a framework for determining the training needs of employees involved with computer systems. It describes the learning objectives of agency computer security training programs. A focus on learning objectives--what the employee should know and be able to direct or actually perform--is a generic way to write the guidelines so that agencies may use the guidance in developing, acquiring, evaluating, and selecting training courses in computer security that fit the agency environment. This approach also allows agencies to state clearly the purpose of the training so that effectiveness can be measured by determining how many of the learning objectives have been met.

Citation

Special Publication (NIST SP) - 500-172

Report Number

500-172

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Superceded By Publication

Information Technology Security Training Requirements: A Role- and Performance-Based Model

Download Paper

DOI Link

Keywords

awareness, computer security, training

Citation

Todd, M. and Guitian, C. (1989), Computer Security Training Guidelines, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.500-172 (Accessed October 31, 2024)