Briefly describe how educating employees and contract workers is a critical part of implementing trustworthy computing

Answer 1

An ongoing security problem for companies is creating and enhancing user awareness of security policies. Employees and contract workers must be educated about the importance of security, so they will be motivated to understand and follow the security policies. Often, this can be accomplished by discussing recent security incidents that affected the organization. Users must understand that they are a key part of the security system and that they have certain responsibilities. For example, users must help protect an organization's information systems and data by doing the following:

· Guarding their passwords to protect against unauthorized access to their accounts
· Prohibiting others from using their passwords
· Applying strict access controls (file and directory permissions) to protect data from disclosure or destruction
· Reporting all unusual activity to the organization's IT security group
· Ensuring that portable computing and data storage devices are protected (hundreds of thousands of laptops are lost or stolen per year)