We provide these white papers to demonstrate the quality and style of our writing, to encourage you to plan your own information security awareness program and to give something back to the Internet community that gives us so much. We hope you find them valuable. By all means link to them and let us know if you’d like further information.

NB: unlike many white paper sources on the Web, we won’t ask you to submit any personal information to download our papers. We don’t need to know your email address or name for this, and we respect your right to privacy. If you want more information from us, it’s up to you to get in touch. The ball is in your court.

Why awareness?

Just what is so important about information security awareness anyway and, by the way, is security awareness enough? This white paper explores the thinking behind NoticeBored, and includes a growing collection of sage comments relating to security awareness from experts in the field.

NoticeBored blog

Track our blog’s RSS feed to keep up with news, resources and commentary, mostly relating to the current month’s awareness topic.

The state of IT auditing

IT auditing has come a long way from tick-and-bash reviews of mainframe security parameters. Read about the state of the art courtesy of this article from EDPACS, the premier IT audit and control journal.

2008 security awareness calendar

The environmentally-friendly NoticeBored 2008 security awareness calendar recycles twelve of our favorite images originally delivered to NoticeBored customers for use as security awareness posters during 2007.

Security awareness podcast

Gary Hinson, our CEO, was interviewed for a podcast by Scott Pinzon at Watchfire. Hear how to make your security awareness program more effective by engaging managers, IT professionals and general employees, linking security in home life with security at work, and combining communications methods.

Awareness business case

This white paper lays out a generic cost-benefit justification for investment in a structured security awareness program. Even if you do not intend to become a NoticeBored customer, you will hopefully find the ideas in this paper useful if you need to persuade your management to invest in security awareness.

7 myths about security metrics

A white paper on security metrics, originally published in the July 2006 issue of the ISSA Journal, picked out and knocked over seven common myths about security metrics, and went on to outline a rational process for choosing useful metrics.

7 steps to security awareness

If you think you might like to run a security awareness program but are not sure where to start, take a look at our white paper. We outline the process for drawing up your requirements, evaluating and selecting suitable solutions and so leading up to the point where you can launch your program. This is a generic process description, not specific to NoticeBored.

Building a culture of information security

Simply making employees aware of their information security responsibilities is not necessarily sufficient to make them comply. NoticeBored approaches changing the corporate culture through education, training and awareness activities to inform and motivate people.

Data-center security

An early example from our technical awareness stream concerning physical security measures and environmental protection for the data center.

Human factors in information security

A short paper succinctly summarizing the innovative concepts underlying the NoticeBored service. Rated Best security paper by InfosecWriters.com.

ISO27k and NoticeBored

This page explains how NoticeBored relates to the ISO/IEC 27000-series best practice standards for Information Security Management Systems.

NoticeBored Newsletter

The free monthly PDF newsletter introduces the background to each of our awareness modules and presents a generic risk analysis on the topic. To find out about the corresponding best practice controls, and to receive the MS Word version of the newsletter, you’ll need to subscribe to NoticeBored Classic or Plus.

Phishing alert & posters

Phishers use fraudulent emails and websites to lure unsuspecting victims into parting with personal information. Click here to find out more about this current threat.

NB: all our papers are protected by copyright. Please respect our intellectual property rights and don’t rip them off or plagiarize them. We actively defend our rights but we’d rather not see you in court!