Tuesday, 2 June 2015

The Human Error Risk in Cyber Security

Is The Future Cyborg?  Waking Up to the Human Error Risk in Cyber Security

By Stuart Peck, Pre-Sales Manager, ZeroDayLab



Human achievement is incredible, just look at digital technology and the internet, but people can also make mistakes.  When APTs are increasing and targeting weaknesses in staff and suppliers to overcome improved technical defences; can organisations control the risk of human fallibility or is the only answer to employ cyborgs?

Since 2012 there has been a 51% increase in security budgets, yet incidents are up 25% and financial costs of a breach are up 18% (The Global State of Information Security Survey 2014, PWC).  The importance of implementing improved security technologies is irrefutable and this is exactly why exploiting human weakness has become the lucrative path for cyber criminals from poor configuration and password management to social engineering and spear phishing.

IBM’s 2014 Cyber Security Intelligence Index cites human error as a contributing factor in 95% of incidents.  What we regularly see in businesses is an improved top-level approach employing technology, technical controls and automation but the technology is in reality just the safety net.  What is lacking is an understanding throughout organisations of the individual’s contribution to security both on and offline.  To achieve this, a top-down cyber strategy is required involving a combined focus on people, process and technology.

People as the First Line of Defence

When human error can happen even within IT teams who know best (we regularly come across admin accounts with passwords set as ‘admin’) how do you motivate your privileged insiders, staff and third party suppliers to be the first line of defence?

Current office culture creates a belief that it is IT’s role to protect the organisation, not staff members or third party suppliers.  Simple things such easy-to-guess passwords, carrying data on USBs, leaving desktops unlocked, or opening attachments may not be something people may be aware of.

Organisations winning the fight with human error have shifted their focus to processes and training in four areas:

1) People 
Regular education programmes are key; highlighting the individual’s role in security, the latest threats and how they target people (both on and offline), policies, procedures and just as importantly the consequences of human error; namely fines, reputation/brand damage and loss of business.  Tailor it to departments and roles and aim to refresh training at a minimum of every 6 month

2)  Processes 
Tighten processes and procedural controls from application implementation and administrator controls, to privileged access, data handling and also physical office security.

3) Test & Review 
Some organisations test their internal controls by sending phishing attacks to their own staff.  That way, they can identify who would benefit from further security awareness training.  Similarly physical security processes should be audited on a regular basis.

4)  Technology testing 
Applications and websites develop and change and weaknesses can appear in code and privileges.  Ensure you have a regular and frequent penetration testing plan to ensure all controls are properly in place and are keeping pace with changes in the external threat environment.

Do we need cyborgs?  While they might be the ultimate hybrid of the human and technology, we can mitigate the risk of human error with the right strategy.  To err is human; people, process and technology is the divine.

We ask this question to you; How do you motivate your users (and other binding parties) to be the first line of defence/IT Security conscious? 






86 comments:

  1. I started playing at simply free online slots after reading reviews from other players and I see that it’s not for nothing. Judging by the number of reviews on the Internet, it seems that only the lazy one did not play here)) Well, by the number of reviews and topics on the forums one can definitely say that this is one of the most popular players

    ReplyDelete
  2. Great article with excellent content found very useful thank you waiting for next blog update.
    Data Analytics Course Online

    ReplyDelete
  3. Awesome article with top quality information and I appreciate the writer's choice for choosing this excellent topic found valuable thank you.
    Data Science Training in Hyderabad

    ReplyDelete
  4. With so many books and articles appearing to usher in the field of making money online and further confusing the reader on the real way to make money.

    Business Analytics Course in Bangalore

    ReplyDelete
  5. I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.

    Data Analytics Course in Bangalore

    ReplyDelete
  6. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ReplyDelete
  7. Great article with valuable information found very resourceful and enjoyed reading it waiting for next blog updated thanks for sharing.
    typeerror nonetype object is not subscriptable

    ReplyDelete
  8. Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
    Cyber Security Course in Bangalore

    ReplyDelete
  9. Writing in style and getting good compliments on the article is hard enough, to be honest, but you did it so calmly and with such a great feeling and got the job done. This item is owned with style and I give it a nice compliment. Better!
    Cyber Security Training in Bangalore

    ReplyDelete
  10. Fantastic article with informative content. Information shared was valuable and enjoyed reading it looking forward for next blog thank you.
    Ethical Hacking Course in Bangalore

    ReplyDelete
  11. I will very much appreciate the writer's choice for choosing this excellent article suitable for my topic. Here is a detailed description of the topic of the article that helped me the most.
    unindent does not match any outer indentation level

    ReplyDelete
  12. I'm glad I found this blog! Occasionally, students want to know the keys to writing productive literary essays. Your first-class knowledge of this great job can become a suitable foundation for these people. Good
    unindent does not match any outer indentation level python

    ReplyDelete
  13. Really, this article is truly one of the best, information shared was valuable and resourceful Very good work thank you.
    Data Scientist Training in Hyderabad

    ReplyDelete
  14. Attend The Data Analyst Course From ExcelR. Practical Data Analyst Course Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Data Analyst Course.
    Data Analyst Course

    ReplyDelete
  15. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ReplyDelete

  16. I finally found a great article here with valuable information and just added your blog to my bookmarking sites thank you.
    Data Science Course in Bangalore

    ReplyDelete
  17. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ReplyDelete
  18. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ReplyDelete
  19. Thanks for posting the best information and the blog is very informative.Data science course in Faridabad

    ReplyDelete
  20. Fantastic Site with useful and unique content looking forward to the next update thank you.
    Data Science Training in Hyderabad

    ReplyDelete
  21. Excellent site with great content and very informative. I would like to thank you for the efforts you have made in writing.
    Data Science Training in Bangalore

    ReplyDelete
  22. I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.
    Data Analytics Courses in Bangalore

    ReplyDelete
  23. I am delighted to discover this page. I must thank you for the time you devoted to this particularly fantastic reading !! I really liked each part very much and also bookmarked you to see new information on your site.
    Data Science In Bangalore

    ReplyDelete
  24. I really enjoy reading all of your blogs. It is very helpful and very informative and I really learned a lot from it. Definitely a great article
    Data Science Course Bangalore

    ReplyDelete
  25. I really enjoy reading all of your blogs. I just wanted to let you know that you have people like me who appreciate your work. Definitely a great article. Congratulations! The information you have provided is very helpful.

    Data Analytics Courses in Bangalore

    ReplyDelete
  26. Fantastic blog with excellent information and valuable content just added your blog to my bookmarking sites thank for sharing.
    Data Science Course in Chennai

    ReplyDelete
  27. managed a range of event formats including conferences summits trade shows field events and more. event marketing and free event registration site

    ReplyDelete
  28. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.
    Data Analytics Course in Bangalore

    ReplyDelete
  29. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, hope you will provide more information on these topics in your next articles.
    Business Analytics Course

    ReplyDelete
  30. Wonderful blog post. It's absolute magic on your part! I have never seen a more wonderful article than this. You really made my day today with this. Hope you continue like this!

    Best Data Science Courses in Bangalore

    ReplyDelete
  31. Really impressed! Everything is a very open and very clear clarification of the issues. It contains true facts. Your website is very valuable. Thanks for sharing.

    Business Analytics Course

    ReplyDelete
  32. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Best Data Science Courses in Bangalore

    ReplyDelete
  33. I don't have time to read your entire site right now, but I have bookmarked it and added your RSS feeds as well. I'll be back in a day or two. Thank you for this excellent site.
    Digital Marketing Course in Bangalore

    ReplyDelete
  34. Wonderful illustrated information. Thank you. It will certainly be very useful for my future projects. I would love to see more articles on the same topic!
    Data Analytics Course in Bangalore

    ReplyDelete
  35. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
    data science course fees in bangalore

    ReplyDelete
  36. Awesome article. I enjoyed reading your articles. this can be really a good scan for me. wanting forward to reading new articles. maintain the nice work!
    Data Science Courses in Bangalore

    ReplyDelete
  37. What an incredible message this is. Truly one of the best posts I have ever seen in my life. Wow, keep it up.
    AI Courses in Bangalore

    ReplyDelete
  38. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Business Analytics Course in Bangalore

    ReplyDelete
  39. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
    data science course fees in bangalore

    ReplyDelete
  40. i am glad to discover this page : i have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
    best data science courses in bangalore

    ReplyDelete
  41. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging endeavours.
    data science course in bangalore with placement

    ReplyDelete
  42. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging endeavours.
    data science certification in bangalore

    ReplyDelete
  43. I am happy to visit here. Thanks to my friend who told me about this webpage, this blog is really awesome
    Data Science Training in Hyderabad
    Data Science Course in Hyderabad

    ReplyDelete
  44. I am glad to discover this page. I have to thank you for the time I spent on this especially great reading !! I really liked each part and also bookmarked you for new information on your site.
    Data Science Training in Chennai

    ReplyDelete
  45. This post is very simple to read and appreciate without leaving any details out. Great work!
    best data science institute in hyderabad

    ReplyDelete

  46. I feel very grateful that I read this. It is very helpful and very informative and I really learned a lot from it.
    Data Science Course in Chennai

    ReplyDelete
  47. All of these posts were incredible perfect. It would be great if you’ll post more updates and your website is really cool and this is a great inspiring article.
    Artificial Intelligence course in Chennai

    ReplyDelete
  48. I really enjoyed reading your blog. It was very well written and easy to understand. Unlike other blogs that I have read which are actually not very good. Thank you so much!

    Data Science Training in Bangalore

    ReplyDelete
  49. Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in the future too.

    Digital Marketing Training in Bangalore

    ReplyDelete
  50. I will very much appreciate the writer's choice for choosing this excellent article suitable for my topic. Here is a detailed description of the topic of the article that helped me the most.

    Artificial Intelligence Training in Bangalore

    ReplyDelete
  51. The Extraordinary blog went amazed with the content that they have developed in a very descriptive manner. This type of content surely ensures the participants explore themselves. Hope you deliver the same near the future as well. Gratitude to the blogger for the efforts.

    Machine Learning Course in Bangalore

    ReplyDelete
  52. This is an excellent post . thanks for sharing it. It is really what I wanted to see. I hope in the future you will continue to share such an excellent post.

    digital marketing courses in hyderabad with placement

    ReplyDelete
  53. Thanks for posting the best information and the blog is very important.data science institutes in hyderabad

    ReplyDelete
  54. This post is very simple to read and appreciate without leaving any details out. Great work!
    business analytics course

    ReplyDelete
  55. Fantastic article I ought to say and thanks to the info. Instruction is absolutely a sticky topic. But remains one of the top issues of the time. I love your article and look forward to more.
    Data Science Course in Bangalore

    ReplyDelete
  56. I am glad to discover this page. I have to thank you for the time I spent on this especially great reading !! I really liked each part and also bookmarked you for new information on your site.
    Data Science Course Syllabus

    ReplyDelete
  57. Impressive. Your story always brings hope and new energy. Keep up the good work.
    business analytics course

    ReplyDelete
  58. Thank you quite much for discussing this type of helpful informative article. Will certainly stored and reevaluate your Website.
    Data Analytics Course in Bangalore

    ReplyDelete
  59. Very wonderful informative article. I appreciated looking at your article. Very wonderful reveal. I would like to twit this on my followers. Many thanks! .
    Data Analytics training in Bangalore

    ReplyDelete
  60. Nice to be seeing your site once again, it's been weeks for me. This article which ive been waited for so long. I need this guide to complete my mission inside the school, and it's same issue together along with your essay. Thanks, pleasant share.
    Data Science training in Bangalore

    ReplyDelete
  61. i am glad to discover this page : i have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
    artificial intelligence training in chennai

    ReplyDelete
  62. With so many books and articles appearing to usher in the field of making money online and further confusing the reader on the real way to make money.
    Business Analytics Course

    ReplyDelete
  63. You actually make it seem like it's really easy with your acting, but I think it's something I think I would never understand. I find that too complicated and extremely broad. I look forward to your next message. I'll try to figure it out!
    Data Analytics Course in Bangalore

    ReplyDelete
  64. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Digital Marketing Course in Bangalore

    ReplyDelete
  65. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, hope you will provide more information on these topics in your next articles.

    Digital Marketing Course in Bangalore

    ReplyDelete
  66. What a really awesome post this is. Truly, one of the best posts I've ever witnessed to see in my whole life. Wow, just keep it up.
    business analytics course

    ReplyDelete
  67. Incredibly conventional blog and articles. I am realy very happy to visit your blog. Directly I am found which I truly need. Thankful to you and keeping it together for your new post…

    AWS Training in Hyderabad

    ReplyDelete
  68. Terrific post thoroughly enjoyed reading the blog and more over found to be the tremendous one. In fact, educating the participants with it's amazing content. Hope you share the similar content consecutively.

    data science course in varanasi

    ReplyDelete



  69. I was basically inspecting through the web filtering for certain data and ran over your blog. I am flabbergasted by the data that you have on this blog. It shows how well you welcome this subject. Bookmarked this page, will return for extra. data science course in jaipur

    ReplyDelete
  70. Extremely overall quite fascinating post. I was searching for this sort of data and delighted in perusing this one. Continue posting. A debt of gratitude is in order for sharing. data analytics course in delhi

    ReplyDelete
  71. You have completed certain reliable points there. I did some research on the subject and found that almost everyone will agree with your blog.

    Data Science Training in Bangalore

    ReplyDelete
  72. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ...

    Digital Marketing Training in Bangalore


    ReplyDelete
  73. I found Habit to be a transparent site, a social hub that is a conglomerate of buyers and sellers willing to offer digital advice online at a decent cost.

    Artificial Intelligence Training in Bangalore

    ReplyDelete
  74. You actually make it seem like it's really easy with your acting, but I think it's something I think I would never understand. I find that too complicated and extremely broad. I look forward to your next message. I'll try to figure it out!

    Machine Learning Course in Bangalore

    ReplyDelete
  75. Thanks for posting the best information and the blog is very good.data science course in Lucknow

    ReplyDelete
  76. It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.

    Digital Marketing Training in Bangalore

    ReplyDelete
  77. A good blog always contains new and exciting information, and reading it I feel like this blog really has all of these qualities that make it a blog.

    Artificial Intelligence Training in Bangalore

    ReplyDelete
  78. This is a fabulous post I saw because of it. It is really what I expected to see trust in future you will continue in sharing such a mind boggling post
    data scientist training and placement in hyderabad

    ReplyDelete
  79. Happy to chat on your blog, I feel like I can't wait to read more reliable posts and think we all want to thank many blog posts to share with us.

    Machine Learning Course in Bangalore

    ReplyDelete
  80. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.

    Data Science Training in Bangalore

    ReplyDelete