Leveraging a Securing Awareness Program from a Security Policy

Author: Howard Uhr Published Jan. 6, 2011 from SANS

What do we really know about the 3security policy that the parent company boasts? Does it address our divisional business needs; do I even know where to find it? Worse yet, Operations doesn't know much about it and the dispatchers on the floor haven't heard of it. How do we make the security policy a tool that the organization will adopt as a lifestyle change? Now what do we do?