Your Employees Are Key to Your Company’s Cybersecurity
The list of key software and hardware devices and tools that today’s security-conscious organizations are applying against the threat of network breaches can go on and on...
…Firewalls, Anti-Virus, Multi-Factor Authentication, Backups, Encryption, White-Listing, Access Limitations, Strong Passwords, Virtual Private Networks, Open DNS, Spam Filtering, Guest Wireless Networks, Anti-Malware, Mobile Device Management, Sandboxing, Surveillance Monitoring, Anti-Keylogging. All have a place. Some are necessary, and others make sense depending on the threat and the business need.
Yet, this extensive list of tools above does not include your first and most important line of defense to protect your business and reduce your risk—your employees! Many take the approach that technology can thwart the nefarious elements trying to gain your confidential data and take them for ransom. Technology can help, but it can only do so in conjunction with the human element. Think of it in the way a small business secures their physical building at the close of business. They have a security system in place, but it must be engaged by the last person out of the building. The system is great, but it needs the staff member to activate it to work effectively.
Over 90% of Computer Breaches Are Caused By Some Sort of Human Error!
Why is the involvement of your employees so important to cybersecurity? The answer is that over 90% of computer breaches are caused by some sort of human error. That is a staff member making a poor choice—a bad decision that opens the firm to intrusion from the bad guys.
Employee Cybersecurity Training and Testing Are of Paramount Importance
What is the most important thing you can do for your staff beyond putting in place the proper hardware and software tools and enforcing security policies? The answer is Training and Testing on a regular and consistent basis. The goal is a culture of security that all understand and live out daily.
Employee cybersecurity training should include:
- Awareness of vulnerabilities and threats
- Role and responsibility of each in protection of company data
- Regulatory and compliance obligations that apply
- Document management policies
- How to report potential threats
- Explanation and enforcement of strict password/password-refresh policies
- Software that can/cannot be used on company-owned devices
- Safe browsing rules/limits
- Email security including social engineering and phishing examples
- Hardware protection/locks
This training must be conducted regularly and updated continually to keep it evergreen. ALL staff members must undergo training consistently, including the CEO. Upper management personnel in the big/corner offices are the key targets for cyberattacks and cannot escape this responsibility!
Empower your staff members with the knowledge and tools they need to recognize cyberthreats. Contact IT Radix to get started on cybersecurity training and testing for your staff today. After all, knowledge is power!
