An often-overlooked part of any cybersecurity program is awareness and training. Because the Defense Industrial Base (DIB) and Defense Supply Chain (DSC) are under constant and evolving attacks, the human element of defense is critical. Basic and simple attacks can cause catastrophic outcomes to an organization. As people become more aware of basic attacks, our adversaries will
continue to create ways to try and gain access to sensitive data like Controlled Unclassified Information (CUI). Although cybersecurity topics and content can be applied across every organization,
a good training and awareness program should be specific to the organization, based on their environment and systems storing CUI.
Some key topics covered in a good cybersecurity training and awareness program: