The primary objective of a Information security awareness program is to educate users on their responsibility to help protect the confidentiality, availability and integrity of their organizations information and information assets. Information security is everyone’s responsibility, not just the IT security department. It is critical that users understand not only on how to protect the organization’s information, but why it is important to protect that information. People are often the weakest link in a security chain, because they are not trained or generally aware of what security is all about. Employees must understand how their actions can greatly impact the overall security position of an organization. An awareness program should reinforce security policy and other information security practices that are supported by the organization. Information Security awareness helps minimize the cost of security incidents, helps accelerate the development of new application systems, and helps assure the consistent implementation of controls across an organization’s information systems. This APP is to support the objective of Information Security Awareness programs