#1 Show employees that you mean business by having a senior company official (the more senior the better) introduce the organization's ePolicies.
#2 If a senior executive wants to conduct the entire training program, great. Otherwise, assign in-house experts from various departments the roles of ePolicy trainers. Your human resources director, chief information officer, cyberlawyer, and public relations director could each be called on to review various aspects of the ePolicies with employees.
#3 Distribute printed copies of the organization's eMail, Internet, and software usage policies. Walk employees through each policy, point by point. Encourage questions and discussion. Having experts on hand to answer questions and address concerns will help reduce resistance and increase the likelihood of compliance.
#4 Do not wrap up training until you are certain all employees understand each ePolicy and what constitutes appropriate--and inappropriate--use of the organization's computer assets.
#5 If your policies include eMail and Internet monitoring, say so.
#6 Explain to employees exactly what type of personal use is acceptable and what is unacceptable.
#7 Review penalties thoroughly. Make it clear that policy violations will result in disciplinary action or termination.
#8 Ask every employee to sign and date two copies of each ePolicy, acknowledging the employee has read and understands it.
#9 Provide each employee with a signed copy of each policy. Place a master set of the written policies in the organization's employee handbook. Make electronic copies of the ePolicies accessible through the company's Intranet system.
#10 Develop continuing education
tools to reinforce training among managers and employees.
Send policy reminders via eMail. Hold periodic training
sessions to update employees on policy changes. Make
annual ePolicy training mandatory for all employees and managers.
Post policy updates on the company's Intranet site.
Put ePolicy reminders in paycheck envelopes.
Raise employees' eConsciousness, and keep them focused on their role in making the company's eRisk management initiative a success.
