Core Integrity is a employee integrity organisation who recently published an article which labels employees as a business' biggest CyberSecurity threat. Their backing for this claim is the Australian Signals Directorate CyberSecurity Awareness Month's core theme - they summarised it as "When your trusted employee clicks the wrong link (or the right one, with the wrong intent), it’s game over".
It may sound sensationalist, however if the ASD is willing to say it, we should be taking note.
The core themes from the article include -
- Be realistic in your CyberSecurity training,
- Reward staff when they report issues - rather than punish,
- Build CyberSecurity habits - ie, once a year training is not enough to protect you,
- Avoid the common password pitfalls and don't use personal devices at work, and
- Make IT security everyone's responsibility.
Clearstone Governance wholeheartedly agree!
The article link is https://coreintegrity.com.au/insider-risk-your-biggest-threat-has-a-staff-badge/