{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"Episode 204 - Evaluating Your Security Program: Communications Plan","description":"Episode 204 - Evaluating Your Security Program: Communications Plan   Why Evaluate Your Program Part of annual policy review If you don\u2019t evaluate you will never improve Continual review will help protect your budget Awareness and Education is how most people in your org know the program Threat Mapping maps the outside threats to your inside controls & tech Communications is that final turn from the inside out Start At The Outside and Move Your Way In If Education & Awareness are how the employees engage the program then Communications is how the management team engage the program In business life, like everywhere else, if people don\u2019t know who you are or what you do then they aren\u2019t going to be willing or able to support you in times of crisis or need The higher up in the org you want to communicate the more deliberate your plan needs to be Why Even Consider Communications? Each sub-org needs to be considered CIO-org CFO-org COO-org CMO-org CCO-org Unless you report to the CEO the next person down in your chain is going to have to likely carry that water We will address the opportunities and dangers of directly engaging a CEO at some other podcast Notice that there is no \u201cCEO-org\u201d Determine the Audience(s) Updated status reports are better than a \u2018newsletter\u2019 Compelling progress reports (especially if validated by a third party) can be a huge gain If you invent something new it better be hugely valuable \u201cCommunication is what the listener does\u201d Leverage Existing Comms Before Inventing Something New Get over yourself Really. \u201cBut this is just playing politics!\u201d ","author_name":"The Southern Fried Security Podcast","author_url":"http:\/\/www.southernfriedsecurity.com","html":"