Case study: A recent cyber security risk analysis identified a ransomware via spear-phishing to be a significant business risk to XYZ Realty Group (XYZRG). The chief information security officer (CISO) has advised XYZRG management and was given the go-ahead to institute a thorough SEAT programme and a comprehensive incident response plan to adequately deal with a ransomware attack. You have been hired by XYZRG to develop and offer a social engineering SETA program specifically focused on spear- phishing attacks to its staff.

Task 1: Security Education Training and Awareness (SETA) Programme Create a role-based SETA programme in the following three roles: real estate agents, data centre operators, and cyber security engineers. For each role, recommend the most appropriate and unique SETA element using the table shown below.

Here is the description of each criterion:

Goals identify two unique and meaningful goals. Explain why you have chosen them.

Objectives identify one or more unique objectives for each goal. Explain why you have chosen them and how the objectives help attain the goals.

Programmes choose from security education, security training, or security awareness the most appropriate program for the role. Justify why you choose it.

Delivery identify a suitable SETA element delivery method. Explain and justify why the method will be effective for the role.

Value explain what the attendees can take away from the programme that will help or advance their knowledge, skill, or awareness level.

When writing your answer for each criterion, consider the background and skill level of the staff in each role. Also, make sure you explain and provide justifications that are supported by relevant references. Complete the table: SETA Program

Please do not copy answer from similar question or copy paste online material.

SETA Program