Developing foundation level security training for the beginners and the advanced

Foundation level security training – that is, the process of bringing all hands up to a common technical proficiency level – can be frustrating to both beginners and proficient students alike. Figuring out the right line of attack is an art; the first step involves deciding who most needs the training (hint: it’s not the proficient students).

I’m torn when it comes to developing and deploying “foundation” level training. I completely understand (and agree with!) the necessity of bringing everyone in a group up to a common proficiency level through the teaching of basic key terms and concepts. I get it. This is important if people and functional groups are expected to interoperate.