IT security functions have become increasingly technologically and managerially complex and organizations are seeking educated IT security professionals who can solve severe security and privacy problems and who can integrate security principles with changing technology and evolving security implications. Training starts with Security Basics and Literacy, and then builds a wide range of security-related skills needed by employees. Education is the capstone of the learning continuum, creating expertise necessary for IT security specialists and professionals. Providing training to individuals does not necessarily ensure that learning has occurred. This enables evaluation to become a component of organizational IT security training programs and provides an evaluation planning process.
Individuals learn in different ways, and each has a preferred or primary learning style.
The learning approach most effective for individuals is a function of their preferred learning style, education, and prior experience. Instructors should be aware of these learning style differences and should use a variety of teaching approaches and presentation formats such as multimedia, searchable databases, text, graphics, simulations, team teaching, decision trees, and interactive learning. Materials developers and trainers should consider the education and experience of their target audience and tailor their presentation approach and content accordingly. Adult learners learn best when they perceive the relevance of the knowledge or skill to their current job or to their career advancement. When the instructor is able to emphasize the applicability and practical purpose of the material to be mastered, the learning retention rates and the subsequent transference of the new knowledge or skill to the learners' jobs and organizational settings will be enhanced.