InfraGard announced the availability of free-online security awareness training at http://www.infragardawareness.com.  The course is free; there is a fee of $24.95 for those who wish to take a certification exam.

It's great to see such a training resource available at no cost, since many employees can benefit from security awareness training, yet some companies have a hard time justifying paying it.

Going through some of the sessions, I found the delivery format clean, though not very exciting. That's perhaps my biggest concern about this course--individuals not motivated to learn its contents may have a hard time paying attention. (I wrote about the need to make awareness training exciting in an earlier diary.)

Yet, many of the lessons in the course contain information personally-relevant to the individuals taking the course, which is great to see. The Flash-based course consists of 13 lessons, covering topics such as:

• Who commits cybercrime
• Social engineering
• Email use
• Safe web use
• Peventing identity theft

Congrats to the InfraGard team on having made this available, and thanks.

Update: Chris pointed us to OnGuard Online, which has excellent (and entertaining) games and videos that promote on-line security practices. Nicely done!

-- Lenny

Lenny Zeltser - Security Consulting

Lenny teaches malware analysis at SANS Institute. You're welcome to follow him on Twitter. You can track new Internet Storm Center diaries by following ISC on Twitter.