The importance of educating organizational end users about their roles and responsibilities towards information security is widely acknowledged. However, many current user education programs have been created by security professionals who do not necessarily have an educational background. The nature of such programs is thus not always properly understood. This lack of understanding could result in the ineffectiveness of security guidelines or programs in practice. This paper attempts to provide additional understanding of these programs through an examination of the revised version of Bloom's taxonomy. The paper show how this taxonomy could be applied to information security education. KEY WORDS Information Security, Information Security Education, Awareness, Bloom's Taxonomy