It Doesn't Take Magic: Tricks of the Trade to Create an Effective Security Awareness Program (separate registration is required)

Tuesday, April 10 | 1:00PM–4:30PM ET | Maryland Ballroom D, Fifth Floor
Session Type: Additional Fee Program
Delivery Format: Preconference Workshop
Does improving security awareness seem as impossible as pulling a rabbit out of a hat? One of our biggest information security challenges is raising our community's awareness so that higher education better recognizes and defends against threats. It's a multiyear process, but tackling security awareness strategically enables us to harden the community over time and help ensure they are protecting themselves and others. You don't need magic to create an effective security awareness program—but you do need to learn the best tricks of the trade! Participants will develop high-level strategic security awareness plans and identify key activities and initiatives.

Outcomes: Understand key elements and considerations in creating a security awareness plan * Complete a high-level plan and identify specific deliverables for selected topics * Identify appropriate metrics for evaluating effectiveness


  • Tara Schaufler

    Associate Director, IT Risk & Awareness, Princeton University
  • Ben Woelk

    Governance, Awareness, and Training Manager, Rochester Institute of Technology

Resources & Downloads

  • Information Security Communication Plan Template Monthly Woelk and Schaufler

    83 KB, xlsx - Updated on 1/23/2024
  • Information Security Communication Plan Template Quarterly Woelk and Schaufler

    50 KB, xlsx - Updated on 1/23/2024
  • Security Awareness Workshop Workbook 2018 Woelk and Schaufler

    128 KB, docx - Updated on 1/23/2024
  • Security Awareness Resource List Woelk and Schaufler

    19 KB, docx - Updated on 1/23/2024
  • It Doesnt Take Magic Security Awareness presentation for Educause April 2018

    877 KB, pdf - Updated on 1/23/2024