Awareness

{
  "id": "MLC-T-CYB-000375",
  "term": "Awareness",
  "field": "Cybersecurity",
  "definition": "1. The ability of the user to recognize and avoid behaviors that could compromise cybersecurity and to act wisely and cautiously to increase cybersecurity.\n\n2. Awareness is not training. The purpose of awareness presentations is simply to focus attention on security. Awareness presentations are intended to allow individuals to recognize IT security concerns and respond accordingly.\nIn awareness activities, the learner is the recipient of information, whereas the learner in a training environment has a more active role. Awareness relies on reaching broad audiences with attractive packaging techniques. Training is more formal, having a goal of building knowledge and skills to facilitate the job performance.\n\n3. a learning process that sets the stage for training by changing individual andorganizational attitudes to realize the importance of security and the adverse consequences of its failure.",
  "references": [
    "NIST SP 800-50r1",
    "NIST SP 800-50 from NIST SP 800-16",
    "NIST SP 800-16",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/awareness/"
}