Cyber Defense eMagazine December Edition for 2021

These cross-industry roles have collided to teach me valuable lessons about running transatlantic
organisations -- as well as how to protect them from digital adversaries and nation-state threats. Through
my diverse experience, I’ve learned that organisations can make improvements to their overall
cybersecurity effectiveness by focusing on improving training, taking initiative, and increasing internal
communication and collaboration efforts.
Cybersecurity Culture Starts at the Top
Leaders across each and every industry I’ve worked in are the ones who set the tone for how their teams
engage with challenges, solutions and risks. A culture of security awareness and protection starts at the
top.
Their willingness to learn about cybersecurity can make a huge difference in the way the team
approaches education and awareness. Cybersecurity training is often treated as a one-time, brief session
to go over the basics such as password best practices and how to recognize phishing attacks. While this
approach can be educational, there is a lack of engagement happening. organisations typically treat
cybersecurity training as a ‘box ticking’ strategy, where employees are asked to do a training session and
assume the job is done. In reality, employers should be creating a culture that helps people identify
security challenges while also investing in the right technologies.
Moreover, having a supportive and collaborative leadership team is crucial to creating a strong sense of
involvement around cybersecurity. This involves taking a zero-trust approach to cybersecurity by
assuming that there could always be risks. According to a 2020 Insider Threat Report, 68% of
organisations reported that insider attacks were becoming more frequent. This involves having clear onboarding
and off-boarding procedures for employees, hosting clear cybersecurity training sessions,
regularly changing passwords, and having two-factor authentication on at all times. In addition,
businesses should be aware of the best possible technological solutions.
Taking Initiative with Cybersecurity Protection and Risk Factor Awareness
In addition, many organisations struggle with corporate procrastination around cybersecurity issues. This
can lead to major repercussions down the line. Issues should be addressed head on. There are many
relevant examples of this such as an employee putting off changing passwords or implementing twofactor
authentication. The number of stolen passwords and usernames in circulation has increased by
300% since 2018 (Digital Shadows Research Team). Passwords are shared between personal and work
devices and are often written in plain sight rather than secured with a password manager. This further
improves the importance of taking a proactive approach to cybersecurity measures. Passwords should
be regularly changed and updated. Leadership teams should be taking these extra steps.
Cyber Defense eMagazine – December 2021 Edition 50
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.