You are the only full-time Information Security Manager in a medium sized business. You have 3 part time reports (5 hours per week, each person): one senior helpdesk agent, one mid-level server administrator, and one mid-level network administrator. Recognizing that many non-IT staff members aren't familiar with policies, standards, and information security best practices, you decide to start by focusing on a 4 week long security awareness campaign. Due to your limited staff, you decide to focus on 2-3 teaching methods to implement your awareness program.

1. Which 2-3 teaching methods would you choose? Explain why you chose them.
2. How will you measure success of this security awareness campaign?
3. How will you assign your 3 part-time staff work to develop and deliver your awareness program?