Training

Please feel free to make suggestions, comments, critiques, whatever. This is a first draft.

Palmetto Fitness Center
Security Awareness Training

A security policy has been established and implemented by Palmetto Fitness Center management as a standard for the way in which critical business information and systems will be protected from both internal and external threats. Since a security policy is dynamic and must adapt to changes within the organization and new vulnerabilities that are continuously being exposed, employee training will be conducted on a monthly basis. The meetings will be held the first Tuesday of every month at 10:00 am in the main conference room. The goal for this training will be to educate personnel about how the security policy protects the business, the employee, and customers. Business security is based of four main principles:
• protecting information
• maximizing operational effectiveness
• minimizing corporate liability
• protecting the corporate image
Designated members of management and the Systems Analysis Team will meet on a weekly basis to discuss the state of the Palmetto Fitness Center network and the current level of threats and vulnerabilities. The results of these meetings will then be communicated to all employees through company e-mail and at the monthly meetings. Emergency meetings will be scheduled if a situation occurs that demands immediate attention. Other exceptions to provide education and training include:
• a new employee is hired
• an employee is promoted or given new responsibilities
• new user software is installed
• user hardware is upgraded
• aftermath of an infection by a worm or virus
Please direct any questions regarding this document to a member of management or a network administrator.

That looks really good man. I can't think of anything to add to it at the moment though.