Security awareness isn't just education, communications and training. It is cultural change and a movement that requires buy in from the top down and the bottom up. All too often, employees are told they are the weakest link, but they can also be a huge asset to any security team if they are given the right tools and trained properly.
The mysterious foreign villains striking the largest companies and political organizations from the dark corners of the Internet tend to get the splashy headlines. However, the network openings that allow outside cyber-attackers to burrow in, infect databases, and potentially take down an organization’s file servers overwhelmingly originate with trusted insiders.
Improving employees’ cybersecurity awareness often hinges on communicating those initiatives into risks they understand.
March 1, 2017
There’s a C- on your report card, but you’re not alone: The 2017 Global Cybersecurity Assurance Report Card found that the world’s information security practitioners gave global cybersecurity readiness an overall score of 70 percent – a six-point drop over 2016.
In response to new emerging threats targeted at ‘‘smart’’ airports, the European Union Agency for Network and Information Security (ENISA) published a report for airport decision makers.
Bletchley Park, the site famed for breaking the German Enigma encryption system during World War Two, is to become a training academy for the next generation of cyber defense forces.
One hundred billion spam emails are sent out each day. With such daunting numbers, what can businesses do to protect themselves, and their customers' data, from hackers?
Mention cybersecurity and immediate thoughts turn to technical controls such as firewalls, endpoint detection and patching systems. While these and other technical controls certainly are necessary, they must work in tandem with administrative and physical controls in order to form a mature risk mitigation program. This month, we will explore some of the physical aspects of cyber risk management, which inherently relies upon on-site security personnel and employee training for proper execution.
The 2015 RSA Conference provides security professionals access to myriad keynotes, educational sessions and solutions for today’s cybersecurity risks. Whether you’re headed to San Francisco for the conference April 20-24 or you’re observing cybersecurity trends from your office, here is a sampling of some of the trends, products and services showcased at this year’s event.
If you asked your employees to define “cybersecurity,” what would they say?
July 1, 2014
By screening a provider for these qualities, you’ll accomplish much more than a manager who simply wants to “check the box” and get it over with. You’ll walk away knowing participants are getting the training that’s right for them, not an endless sea of faceless masses.