The type of learning that individuals need becomes more comprehensive as they perform more complex multi-disciplinary activities. Awareness, Training, and Education Awareness, training and education are all important processes for helping staff members carry out their roles and responsibilities for information technology security, but they are not the same. Awareness programs which have been established by many organizations are a prerequisite to IT security training. Awareness presentations focus attention on security, and allow individuals to recognize IT security concerns. In awareness activities, the learner is a recipient of information.
Awareness relies on reaching broad audiences with attractive packaging techniques.
Examples of IT security awareness materials are promotional trinkets with motivational slogans, videotapes, and posters or flyers. Awareness presentations must be ongoing, creative, and motivational, with the objective of focusing the learner's attention so that the learning will be incorporated into conscious decision-making. Learning achieved through a single awareness activity tends to be short-term, immediate, and specific. Detailed guidance on IT security awareness is outside the scope of the training guidelines. The fundamental value of IT security awareness programs is that they set the stage for training by bringing about a change in attitudes which change the organizational culture.