Multi-State Information Sharing and Analysis Center (MS-ISAC)

Getting Started Quick Reference

Are you looking to organize an activity to help raise awareness about cyber security? On this Getting Started Quick Reference page you will find several resources to assist you with conducting outreach and marketing to your varied audiences.
The Quick Reference is a companion to the Ten Easy Steps to Creating an Effective Information Security Outreach and Marketing Plan

The Ten Easy Steps was developed to assist your efforts based on lessons learned and best practices. The purpose of this guide is to outline an approachable and repeatable process for focusing and implementing your information security program's outreach activities and marketing services and products.
.

The MS-ISAC's Quick Reference:

Can get you started.
Can help organize your plans to distribute and circulate your Cyber Security key message, products and services to the appropriate audience.
Includes a "How-to" for planning and conducting a Cyber Security Day, seminar or conference and how to conduct a K-12 Cyber Security Awareness Poster Contest.
Like the chart, should be read entirely once and then be used as a quick reference.

While an important part of planning outreach activities may revolve around introducing or "rolling out" specific products and services your organization has or will produce, outreach itself is a strategic endeavor. It's better to do a little planning before you start. That way you make the most of your time and effort.

Let's look at some basic 'need to know' information first, and then some choices for planning your event.so you can proceed from there.

The best way to begin is to understand what your program's baseline is so you can proceed from there.
Next set your goals and objectives for the event. Using the checklists you can identify the purpose of your event and the desired outcome you want to attain.
Knowing your audience and shaping your key message are critical. Who will you invite? What is their role in their organization? How will they use the information from the event? Your audience influences both your event content and how you deliver the message.
Most successes in life are a team effort. A security awareness event is no different. You will most likely need to identify stakeholders, partners and sponsors you will be including in planning and holding your event.
You know who the stakeholders are but they aren't familiar with the message you want to get out or the products and services. How do you engage and get them to commit to this?
Once you have an overall strategy for your event, you need to select tools and tactics to organize and hold your event. In this section you will find real life samples, resources, and checklists your fellow colleagues have used for an event.
You've done the groundwork, how do you implement your event?
Encountering some obstacles and challenges? Is it time to adjust your plans? You're not alone. Find some pointers to overcome challenges when holding an event.
Before you hold the event you should expect there will be some follow up or at least a review of how you did in meeting your goals and objectives for the event. Plan to evaluate or measure your success using some of the templates in this section.
It was a great success! It's time for debriefing and an after action report and lessons learned. It's time to Feedback and Reassess your Strategy

Each section includes tips & hints as well as common mistakes to avoid. Do some planning before you get started on your event. You will find templates to support your efforts.

Now you have a plan. You know your audience and have an idea how you'll hold your event.

How do you pay for this? Most of us don't have much money to work with. How do you get started if you don't have much money? You'll find some great ideas in the funding section. Included are ideas for getting discounted or free speakers, materials, and even light refreshments for your event.

You might be asking, "How do I make a successful presentation of my plan to my boss?" We've included some other great examples for you to start from.

The biggest obstacle to your security outreach event will not be lack of money, materials or resources. It will be someone taking the initiative, putting together a plan, and getting a few good helpers. That's what it takes. And it is easy.

Looking for a complete outreach and marketing plan? Then check out the MS-ISAC publication: "Ten Easy Steps to Creating an Effective Information Security Outreach and Marketing Plan"