Building a Cybersecurity Awareness Program

SEI Report
This guide provides considerations and best practices for the development and implementation of cybersecurity awareness campaigns and programs.
Publisher

Software Engineering Institute

Abstract

Many incident response organizations and teams play a significant role in promoting the cybersecurity awareness of their constituency. There are many factors to consider when developing a cybersecurity awareness program or campaign, including the audience, goals and objectives, and scope of the awareness program or campaign. This guide highlights key considerations and provides process-based applications to be leveraged by Computer Security Incident Response Teams (CSIRTs), Security Operations Centers (SOCs), CSIRTs of National Responsibility, and sector-based CSIRTs, to name a few. This guide also leverages the expertise of the National Institute of Standards and Technology (NIST) and the CSIRT Services Framework developed by the Forum of Incident Response and Security Teams (FIRST) community.

Cite This SEI Report

Hueca, A., Manley, B., & Rogers, L. (2021, February 3). Building a Cybersecurity Awareness Program. Retrieved September 11, 2026, from https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/.

@techreport{hueca_2021,
author={Hueca, Angel and Manley, Brittany and Rogers, Lawrence},
title={Building a Cybersecurity Awareness Program},
month={Feb},
year={2021},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/},
note={Accessed: 2026-Sep-11}
}

Hueca, Angel, Brittany Manley, and Lawrence Rogers. "Building a Cybersecurity Awareness Program." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, February 3, 2021. https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/.

A. Hueca, B. Manley, and L. Rogers, "Building a Cybersecurity Awareness Program," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 3-Feb-2021 [Online]. Available: https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/. [Accessed: 11-Sep-2026].

Hueca, Angel, Brittany Manley, and Lawrence Rogers. "Building a Cybersecurity Awareness Program." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 3 Feb. 2021. https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/. Accessed 11 Sep. 2026.

Hueca, Angel; Manley, Brittany; & Rogers, Lawrence. Building a Cybersecurity Awareness Program. Software Engineering Institute. 2021. https://www.sei.cmu.edu/library/building-a-cybersecurity-awareness-program/