Tuesday, 2 June 2015

The Human Error Risk in Cyber Security

Is The Future Cyborg?  Waking Up to the Human Error Risk in Cyber Security

By Stuart Peck, Pre-Sales Manager, ZeroDayLab



Human achievement is incredible, just look at digital technology and the internet, but people can also make mistakes.  When APTs are increasing and targeting weaknesses in staff and suppliers to overcome improved technical defences; can organisations control the risk of human fallibility or is the only answer to employ cyborgs?

Since 2012 there has been a 51% increase in security budgets, yet incidents are up 25% and financial costs of a breach are up 18% (The Global State of Information Security Survey 2014, PWC).  The importance of implementing improved security technologies is irrefutable and this is exactly why exploiting human weakness has become the lucrative path for cyber criminals from poor configuration and password management to social engineering and spear phishing.

IBM’s 2014 Cyber Security Intelligence Index cites human error as a contributing factor in 95% of incidents.  What we regularly see in businesses is an improved top-level approach employing technology, technical controls and automation but the technology is in reality just the safety net.  What is lacking is an understanding throughout organisations of the individual’s contribution to security both on and offline.  To achieve this, a top-down cyber strategy is required involving a combined focus on people, process and technology.

People as the First Line of Defence

When human error can happen even within IT teams who know best (we regularly come across admin accounts with passwords set as ‘admin’) how do you motivate your privileged insiders, staff and third party suppliers to be the first line of defence?

Current office culture creates a belief that it is IT’s role to protect the organisation, not staff members or third party suppliers.  Simple things such easy-to-guess passwords, carrying data on USBs, leaving desktops unlocked, or opening attachments may not be something people may be aware of.

Organisations winning the fight with human error have shifted their focus to processes and training in four areas:

1) People 
Regular education programmes are key; highlighting the individual’s role in security, the latest threats and how they target people (both on and offline), policies, procedures and just as importantly the consequences of human error; namely fines, reputation/brand damage and loss of business.  Tailor it to departments and roles and aim to refresh training at a minimum of every 6 month

2)  Processes 
Tighten processes and procedural controls from application implementation and administrator controls, to privileged access, data handling and also physical office security.

3) Test & Review 
Some organisations test their internal controls by sending phishing attacks to their own staff.  That way, they can identify who would benefit from further security awareness training.  Similarly physical security processes should be audited on a regular basis.

4)  Technology testing 
Applications and websites develop and change and weaknesses can appear in code and privileges.  Ensure you have a regular and frequent penetration testing plan to ensure all controls are properly in place and are keeping pace with changes in the external threat environment.

Do we need cyborgs?  While they might be the ultimate hybrid of the human and technology, we can mitigate the risk of human error with the right strategy.  To err is human; people, process and technology is the divine.

We ask this question to you; How do you motivate your users (and other binding parties) to be the first line of defence/IT Security conscious? 






78 comments:

  1. Great article with excellent content found very useful thank you waiting for next blog update.
    Data Analytics Course Online

    ReplyDelete
  2. With so many books and articles appearing to usher in the field of making money online and further confusing the reader on the real way to make money.

    Business Analytics Course in Bangalore

    ReplyDelete
  3. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad

    ReplyDelete
  4. Great article with valuable information found very resourceful and enjoyed reading it waiting for next blog updated thanks for sharing.
    typeerror nonetype object is not subscriptable

    ReplyDelete
  5. Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
    Cyber Security Course in Bangalore

    ReplyDelete
  6. I will very much appreciate the writer's choice for choosing this excellent article suitable for my topic. Here is a detailed description of the topic of the article that helped me the most.
    unindent does not match any outer indentation level

    ReplyDelete
  7. I'm glad I found this blog! Occasionally, students want to know the keys to writing productive literary essays. Your first-class knowledge of this great job can become a suitable foundation for these people. Good
    unindent does not match any outer indentation level python

    ReplyDelete
  8. Attend The Data Analyst Course From ExcelR. Practical Data Analyst Course Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Data Analyst Course.
    Data Analyst Course

    ReplyDelete

  9. I finally found a great article here with valuable information and just added your blog to my bookmarking sites thank you.
    Data Science Course in Bangalore

    ReplyDelete
  10. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ReplyDelete
  11. I have to search sites with relevant information ,This is a
    wonderful blog,These type of blog keeps the users interest in
    the website, i am impressed. thank you.
    Data Science Training in Bangalore

    ReplyDelete
  12. Thanks for posting the best information and the blog is very informative.Data science course in Faridabad

    ReplyDelete
  13. Fantastic Site with useful and unique content looking forward to the next update thank you.
    Data Science Training in Hyderabad

    ReplyDelete
  14. I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.
    Data Analytics Courses in Bangalore

    ReplyDelete
  15. I am delighted to discover this page. I must thank you for the time you devoted to this particularly fantastic reading !! I really liked each part very much and also bookmarked you to see new information on your site.
    Data Science In Bangalore

    ReplyDelete
  16. This comment has been removed by the author.

    ReplyDelete
  17. I really enjoy reading all of your blogs. It is very helpful and very informative and I really learned a lot from it. Definitely a great article
    Data Science Course Bangalore

    ReplyDelete
  18. Fantastic blog with excellent information and valuable content just added your blog to my bookmarking sites thank for sharing.
    Data Science Course in Chennai

    ReplyDelete
  19. managed a range of event formats including conferences summits trade shows field events and more. event marketing and free event registration site

    ReplyDelete
  20. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.
    Data Analytics Course in Bangalore

    ReplyDelete
  21. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, hope you will provide more information on these topics in your next articles.
    Business Analytics Course

    ReplyDelete
  22. Wonderful blog post. It's absolute magic on your part! I have never seen a more wonderful article than this. You really made my day today with this. Hope you continue like this!

    Best Data Science Courses in Bangalore

    ReplyDelete
  23. Really impressed! Everything is a very open and very clear clarification of the issues. It contains true facts. Your website is very valuable. Thanks for sharing.

    Business Analytics Course

    ReplyDelete
  24. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Best Data Science Courses in Bangalore

    ReplyDelete
  25. I don't have time to read your entire site right now, but I have bookmarked it and added your RSS feeds as well. I'll be back in a day or two. Thank you for this excellent site.
    Digital Marketing Course in Bangalore

    ReplyDelete
  26. Wonderful illustrated information. Thank you. It will certainly be very useful for my future projects. I would love to see more articles on the same topic!
    Data Analytics Course in Bangalore

    ReplyDelete
  27. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
    data science course fees in bangalore

    ReplyDelete
  28. Awesome article. I enjoyed reading your articles. this can be really a good scan for me. wanting forward to reading new articles. maintain the nice work!
    Data Science Courses in Bangalore

    ReplyDelete
  29. What an incredible message this is. Truly one of the best posts I have ever seen in my life. Wow, keep it up.
    AI Courses in Bangalore

    ReplyDelete
  30. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Business Analytics Course in Bangalore

    ReplyDelete
  31. I am glad to discover this page. I have to thank you for the time I spent on this especially great reading !! I really liked each part and also bookmarked you for new information on your site.
    Data Science Training in Chennai

    ReplyDelete
  32. This post is very simple to read and appreciate without leaving any details out. Great work!
    best data science institute in hyderabad

    ReplyDelete

  33. I feel very grateful that I read this. It is very helpful and very informative and I really learned a lot from it.
    Data Science Course in Chennai

    ReplyDelete
  34. I really enjoyed reading your blog. It was very well written and easy to understand. Unlike other blogs that I have read which are actually not very good. Thank you so much!

    Data Science Training in Bangalore

    ReplyDelete
  35. Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in the future too.

    Digital Marketing Training in Bangalore

    ReplyDelete
  36. This is an excellent post . thanks for sharing it. It is really what I wanted to see. I hope in the future you will continue to share such an excellent post.

    digital marketing courses in hyderabad with placement

    ReplyDelete
  37. This post is very simple to read and appreciate without leaving any details out. Great work!
    business analytics course

    ReplyDelete
  38. Thank you quite much for discussing this type of helpful informative article. Will certainly stored and reevaluate your Website.
    Data Analytics Course in Bangalore

    ReplyDelete
  39. Very wonderful informative article. I appreciated looking at your article. Very wonderful reveal. I would like to twit this on my followers. Many thanks! .
    Data Analytics training in Bangalore

    ReplyDelete
  40. i am glad to discover this page : i have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
    artificial intelligence training in chennai

    ReplyDelete
  41. You actually make it seem like it's really easy with your acting, but I think it's something I think I would never understand. I find that too complicated and extremely broad. I look forward to your next message. I'll try to figure it out!
    Data Analytics Course in Bangalore

    ReplyDelete
  42. I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
    Digital Marketing Course in Bangalore

    ReplyDelete
  43. What a really awesome post this is. Truly, one of the best posts I've ever witnessed to see in my whole life. Wow, just keep it up.
    business analytics course

    ReplyDelete
  44. Incredibly conventional blog and articles. I am realy very happy to visit your blog. Directly I am found which I truly need. Thankful to you and keeping it together for your new post…

    AWS Training in Hyderabad

    ReplyDelete
  45. I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ...

    Digital Marketing Training in Bangalore


    ReplyDelete
  46. It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.

    Digital Marketing Training in Bangalore

    ReplyDelete
  47. This is a fabulous post I saw because of it. It is really what I expected to see trust in future you will continue in sharing such a mind boggling post
    data scientist training and placement in hyderabad

    ReplyDelete
  48. I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.

    Data Science Training in Bangalore

    ReplyDelete
  49. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
    business analytics courses

    ReplyDelete
  50. You have completed certain reliable points there. I did some research on the subject and found that almost everyone will agree with your blog.



    Data Analytics Course in Bangalore

    ReplyDelete
  51. Very good message. I came across your blog and wanted to tell you that I really enjoyed reading your articles.

    Best Data Science Courses in Bangalore

    ReplyDelete
  52. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Analytics Course in Bangalore

    ReplyDelete
  53. Extremely overall quite fascinating post. I was searching for this sort of data and delighted in perusing this one. Continue posting. A debt of gratitude is in order for sharing. best institute for cloud computing in hyderabad

    ReplyDelete
  54. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.
    data science course in london

    ReplyDelete
  55. Great article with excellent content found very useful thank you waiting for next blog update. whatsapp mod

    ReplyDelete
  56. Really nice and interesting post. I was looking for this kind of information and enjoyed reading this one. Keep posting. Thanks for sharing. data analytics course in patna

    ReplyDelete
  57. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors
    iot training in delhi

    ReplyDelete
  58. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Scientist Course Syllabus

    ReplyDelete
  59. Happy to chat on your blog, I feel like I can't wait to read more reliable posts and think we all want to thank many blog posts to share with us.

    Data Science in Bangalore

    ReplyDelete
  60. It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.

    Data Science Training in Kolkata

    ReplyDelete
  61. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors
    data science training in faridabad

    ReplyDelete
  62. Really, this article is truly one of the best in article history. I am a collector of old "items" and sometimes read new items if I find them interesting. And this one that I found quite fascinating and should be part of my collection. Very good work!

    Data Scientist Training in Bangalore

    ReplyDelete
  63. Thanks for the lovely blog. It helped me a lot. I'm glad I found this blog. Thanks for sharing with us, I too am always learning something new from your post.

    Data Scientist Training in Bangalore

    ReplyDelete
  64. Good blog and absolutely exceptional. You can do a lot better, but I still say it's perfect. Keep doing your best.

    Data Science Training in Nagpur

    ReplyDelete
  65. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.
    data science course in london

    ReplyDelete
  66. Very informative message! There is so much information here that can help any business start a successful social media campaign!

    Data Scientist Course in Bangalore

    ReplyDelete
  67. Very informative message! There is so much information here that can help any business start a successful social media campaign!


    Data Scientist Course in Gorakhpur

    ReplyDelete
  68. Very informative message! There is so much information here that can help any business start a successful social media campaign!

    Data Scientist Course Syllabus

    ReplyDelete
  69. This blog was really great, never seen a great blog like this before. i think im gonna share this to my friends..

    Data Scientist Training in Bangalore

    ReplyDelete
  70. You can take admission to one of the top institutes that offer degrees in data science. In this way, you will learn all the requirements of the field under one roof.
    data science training in lucknow

    ReplyDelete
  71. It's late finding this act. At least, it's a thing to be familiar with that there are such events exist.
    I agree with your Blog and I will be back to inspect it more in the future so please keep up your act.
    360DigiTMG data science course

    ReplyDelete
  72. I truly adored visiting your post and this content was very unique. Thanks a lot for sharing this...
    Child Support Virginia
    Best Female Family Law Attorney

    ReplyDelete
  73. Thanks for sharing beautiful content. I got information from your blog.keep sharing
    cómo solicitar el divorcio nueva jersey

    ReplyDelete
  74. Abogado Tráfico Smyth Virginia se traduce al español como "Abogado de Tráfico en Smyth Virginia".

    "Abogado de Tráfico" se refiere a un abogado que se especializa en asuntos relacionados con el tráfico, como multas, infracciones, accidentes de tráfico, entre otros. Abogado Tráfico Rockbridge VA

    ReplyDelete