Security Training
Dynamic Threat Landscape With so many new complex threats going beyond the standard pharming, phishing, and vishing attacks, assaults are now focusing on the end user or client side exploits. Because of these more sophisticated attacks, it is more important than ever to educate users/employees about these risks. We discovered that most security awareness training programs are simply not enough. Even with extensive training, the knowledge gained on these topics is often forgotten in just a matter of weeks, usually because of a lack of interest or because of the approach of the material presentation.

Covetrix Approach (The Solution) By providing non-conventional, educational, and real world examples, an organization will not only be able to educate employees with increased absorption, but they will also comprehend how these attacks work. This enables employees to spot a scam and then quickly catch it before a security breach occurs.

Non-Conventional: We demonstrate how the latest security threats are derived and implemented. We show what is happening in the background of all these attacks so that users actually see and are more able to recognize an attack.

Real-World Examples: Hear about buying DIY Phishing kits (Do-it-Yourself): a multitude of groups are using this to get information from your customers and employees. We show you how they get it, how they build it, and what it looks like when it hits your desktop. This is the most effective type of training, with absorption rates ten times greater than training styles that present material using bulleted lists.

Covetrix Security Awareness Training Subscription (The Product) In order to implement a successful and comprehensive security awareness training program, Covetrix has implemented a subscription-based service for video training, emails, and newsletters to be branded and distributed to your employees. Online viewing of streaming videos will be available for your users as well as customizable emails, newsletters, and quick alert security updates.

Retention and Compliance (The Covetrix Report Card) It has been proven that more often than not, individuals may watch security awareness training videos, read email messages, or review computer user handbooks with the best of intentions, yet their level of retention and absorption of the security knowledge is often limited. Covetrix has designed IT training videos that keep interest high and result in higher retention rates. The information is presented in a series of training segments, and the users are required to demonstrate mastery of the objectives through an online assessment before progressing to the next training segment. The assessment results are reported to the IT Manager for compliance during examinations to ensure employee knowledge of the material.

To view our Training Portal, visit: http://training.covetrix.com

Rank Item Percentage Range of Prices
1 Credit Cards 22% $0.50 - $5
2 Bank Accounts 21% $30 - $400
3 Email Passwords 8% $1 - $350
4 Mailers 8% $8 - $10
5 Email Addresses 6% $2/MB - $4/MB
6 Proxies 6% $0.50 - $3
7 Full Identity 6% $10 - $150
8 Scams 6% $10/Week
9 Social Security Numbers 3% $5 - $7
10 Compromised Unix Shells 2% $2 - $10

Table 1. Goods available for sale on underground servers
Source: Symantec Corporation 2008