DED becomes first government department to implement Symantec security awareness program

Designed as a web-enabled e-learning initiative, the program will offer a suite of courses that will enable all employees to understand the crucial significance of information security, in addition to teaching them various methods to ensure the security of sensitive information.

"Extensive and widespread use of the Internet and web-based programs for sharing information within and outside an organization, often compromises the security of critical data and information," said Mr. Ali Ibrahim, Deputy Director General for Executive Affairs, DED. "In order to ensure that employees use new technological tools with greater discretion, the DED has decided to implement this Corporate Security Awareness program across all levels at the department," he added.

"The DED is the first government department in the UAE to implement such a program, which shows its keenness to empower all employees to take an active role in the protection of their organization's resources," said Mr. Ali Ibrahim,

The Symantec Security Awareness Program (SSAP) is a comprehensive, measurable, training and communications program, which gives employees the knowledge they need to better protect critical corporate information and other valuable assets. The DED executives can log into the program directly from their computers via an interface.

The SSAP program has been implemented at the Department through Ertiqaa Consultants, which will also market the program to other customers, who can customize the product to their requirements.

"Information security is a matter of crucial importance in today's business environment and even minor security leaks can sometimes cause damage worth millions of dollars," said Kevin Isaac, Regional Director, MENA, Symantec Corporation. "This web-based program that we have developed is the only one of its kind which enables users of new technology to be aware of the security concerns regarding sensitive information and educates them on the use of protective methods in real time, and in their own language" he added.

The program uses a series of interactive computer-based tutorials and supplemental communication tools such as screen savers and ready-to-print pamphlets, reference cards, and posters to guide the user at every stage.

Based on industry best practices for security and international security standards embodied in ISO 17799, the interactive program includes robust user administration and data management, with testing, tracking, and reporting functions to help measure employee participation and knowledge retention. Administrators can easily determine when employees need additional training on any of the 10 courses on offer, as well as specific topics that should be emphasized.