Is The Future Cyborg? Waking Up to the Human Error Risk in Cyber
Security
By Stuart Peck,
Pre-Sales Manager, ZeroDayLab
Human achievement is incredible, just look at digital technology and
the internet, but people can also make mistakes. When APTs are increasing and targeting
weaknesses in staff and suppliers to overcome improved technical defences; can
organisations control the risk of human fallibility or is the only answer to
employ cyborgs?
Since 2012 there has been a 51%
increase in security budgets, yet incidents are up 25% and financial costs of a
breach are up 18% (The Global State of
Information Security Survey 2014, PWC).
The importance of implementing improved security technologies is
irrefutable and this is exactly why exploiting human weakness has become the
lucrative path for cyber criminals from poor configuration and password
management to social engineering and spear phishing.
IBM’s 2014 Cyber Security
Intelligence Index cites human error as a contributing factor in 95% of
incidents. What we regularly see in
businesses is an improved top-level approach employing technology, technical
controls and automation but the technology is in reality just the safety
net. What is lacking is an understanding
throughout organisations of the individual’s contribution to security both on
and offline. To achieve this, a top-down
cyber strategy is required involving a combined focus on people, process and
technology.
People as the First Line of Defence
When human error can happen even
within IT teams who know best (we regularly come across admin accounts with
passwords set as ‘admin’) how do you motivate your privileged insiders, staff
and third party suppliers to be the first line of defence?
Current office culture creates a
belief that it is IT’s role to protect the organisation, not staff members or
third party suppliers. Simple things
such easy-to-guess passwords, carrying data on USBs, leaving desktops unlocked,
or opening attachments may not be something people may be aware of.
Organisations winning the fight
with human error have shifted their focus to processes and training in four
areas:
1) People
Regular education programmes are key; highlighting the individual’s role in
security, the latest threats and how they target people (both on and offline),
policies, procedures and just as importantly the consequences of human error;
namely fines, reputation/brand damage and loss of business. Tailor it to departments and roles and aim to
refresh training at a minimum of every 6 month
2) Processes
Tighten processes and procedural controls from application implementation and
administrator controls, to privileged access, data handling and also physical
office security.
3) Test & Review
Some organisations test their internal controls by sending phishing attacks to
their own staff. That way, they can
identify who would benefit from further security awareness training. Similarly physical security processes should
be audited on a regular basis.
4) Technology testing
Applications and websites develop and change and weaknesses can appear in code
and privileges. Ensure you have a
regular and frequent penetration testing plan to ensure all controls are
properly in place and are keeping pace with changes in the external threat
environment.
Do we need cyborgs? While they might be the ultimate hybrid of
the human and technology, we can mitigate the risk of human error with the
right strategy. To err is human; people,
process and technology is the divine.
We ask this question to you; How do you motivate your users (and other binding parties) to be the first line of defence/IT Security conscious?
Great Article
ReplyDeleteCyber Security Projects Ideas for CSE
Project Centers in Chennai
JavaScript Training in Chennai
JavaScript Training in Chennai
Great article with excellent content found very useful thank you waiting for next blog update.
ReplyDeleteData Analytics Course Online
With so many books and articles appearing to usher in the field of making money online and further confusing the reader on the real way to make money.
ReplyDeleteBusiness Analytics Course in Bangalore
I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ... PMP Training in Hyderabad
ReplyDeleteGreat article with valuable information found very resourceful and enjoyed reading it waiting for next blog updated thanks for sharing.
ReplyDeletetypeerror nonetype object is not subscriptable
Nice Information Your first-class knowledge of this great job can become a suitable foundation for these people. I did some research on the subject and found that almost everyone will agree with your blog.
ReplyDeleteCyber Security Course in Bangalore
I will very much appreciate the writer's choice for choosing this excellent article suitable for my topic. Here is a detailed description of the topic of the article that helped me the most.
ReplyDeleteunindent does not match any outer indentation level
I'm glad I found this blog! Occasionally, students want to know the keys to writing productive literary essays. Your first-class knowledge of this great job can become a suitable foundation for these people. Good
ReplyDeleteunindent does not match any outer indentation level python
Attend The Data Analyst Course From ExcelR. Practical Data Analyst Course Sessions With Assured Placement Support From Experienced Faculty. ExcelR Offers The Data Analyst Course.
ReplyDeleteData Analyst Course
ReplyDeleteI finally found a great article here with valuable information and just added your blog to my bookmarking sites thank you.
Data Science Course in Bangalore
I have to search sites with relevant information ,This is a
ReplyDeletewonderful blog,These type of blog keeps the users interest in
the website, i am impressed. thank you.
Data Science Training in Bangalore
I have to search sites with relevant information ,This is a
ReplyDeletewonderful blog,These type of blog keeps the users interest in
the website, i am impressed. thank you.
Data Science Training in Bangalore
Thanks for posting the best information and the blog is very informative.Data science course in Faridabad
ReplyDeleteFantastic Site with useful and unique content looking forward to the next update thank you.
ReplyDeleteData Science Training in Hyderabad
I bookmarked your website because this site contains valuable information. I am very satisfied with the quality and the presentation of the articles. Thank you so much for saving great things. I am very grateful for this site.
ReplyDeleteData Analytics Courses in Bangalore
I am delighted to discover this page. I must thank you for the time you devoted to this particularly fantastic reading !! I really liked each part very much and also bookmarked you to see new information on your site.
ReplyDeleteData Science In Bangalore
This comment has been removed by the author.
ReplyDeleteI really enjoy reading all of your blogs. It is very helpful and very informative and I really learned a lot from it. Definitely a great article
ReplyDeleteData Science Course Bangalore
Mua vé máy bay tại Aivivu, tham khảo
ReplyDeletekinh nghiệm mua vé máy bay đi Mỹ giá rẻ
bán vé máy bay từ mỹ về việt nam
gia ve may bay di da nang
vé máy bay đi đà lạt bao nhiêu tiền
vé máy bay hải phòng phú quốc
Fantastic blog with excellent information and valuable content just added your blog to my bookmarking sites thank for sharing.
ReplyDeleteData Science Course in Chennai
managed a range of event formats including conferences summits trade shows field events and more. event marketing and free event registration site
ReplyDeleteI wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.
ReplyDeleteData Analytics Course in Bangalore
I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, hope you will provide more information on these topics in your next articles.
ReplyDeleteBusiness Analytics Course
Wonderful blog post. It's absolute magic on your part! I have never seen a more wonderful article than this. You really made my day today with this. Hope you continue like this!
ReplyDeleteBest Data Science Courses in Bangalore
Really impressed! Everything is a very open and very clear clarification of the issues. It contains true facts. Your website is very valuable. Thanks for sharing.
ReplyDeleteBusiness Analytics Course
I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
ReplyDeleteBest Data Science Courses in Bangalore
I don't have time to read your entire site right now, but I have bookmarked it and added your RSS feeds as well. I'll be back in a day or two. Thank you for this excellent site.
ReplyDeleteDigital Marketing Course in Bangalore
Wonderful illustrated information. Thank you. It will certainly be very useful for my future projects. I would love to see more articles on the same topic!
ReplyDeleteData Analytics Course in Bangalore
I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
ReplyDeletedata science course fees in bangalore
Awesome article. I enjoyed reading your articles. this can be really a good scan for me. wanting forward to reading new articles. maintain the nice work!
ReplyDeleteData Science Courses in Bangalore
What an incredible message this is. Truly one of the best posts I have ever seen in my life. Wow, keep it up.
ReplyDeleteAI Courses in Bangalore
I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
ReplyDeleteBusiness Analytics Course in Bangalore
I am glad to discover this page. I have to thank you for the time I spent on this especially great reading !! I really liked each part and also bookmarked you for new information on your site.
ReplyDeleteData Science Training in Chennai
This post is very simple to read and appreciate without leaving any details out. Great work!
ReplyDeletebest data science institute in hyderabad
ReplyDeleteI feel very grateful that I read this. It is very helpful and very informative and I really learned a lot from it.
Data Science Course in Chennai
I really enjoyed reading your blog. It was very well written and easy to understand. Unlike other blogs that I have read which are actually not very good. Thank you so much!
ReplyDeleteData Science Training in Bangalore
Wonderful blog found to be very impressive to come across such an awesome blog. I should really appreciate the blogger for the efforts they have put in to develop such amazing content for all the curious readers who are very keen on being updated across every corner. Ultimately, this is an awesome experience for the readers. Anyways, thanks a lot and keep sharing the content in the future too.
ReplyDeleteDigital Marketing Training in Bangalore
This is an excellent post . thanks for sharing it. It is really what I wanted to see. I hope in the future you will continue to share such an excellent post.
ReplyDeletedigital marketing courses in hyderabad with placement
This post is very simple to read and appreciate without leaving any details out. Great work!
ReplyDeletebusiness analytics course
Thank you quite much for discussing this type of helpful informative article. Will certainly stored and reevaluate your Website.
ReplyDeleteData Analytics Course in Bangalore
Very wonderful informative article. I appreciated looking at your article. Very wonderful reveal. I would like to twit this on my followers. Many thanks! .
ReplyDeleteData Analytics training in Bangalore
i am glad to discover this page : i have to thank you for the time i spent on this especially great reading !! i really liked each part and also bookmarked you for new information on your site.
ReplyDeleteartificial intelligence training in chennai
You actually make it seem like it's really easy with your acting, but I think it's something I think I would never understand. I find that too complicated and extremely broad. I look forward to your next message. I'll try to figure it out!
ReplyDeleteData Analytics Course in Bangalore
I am sure it will help many people. Keep up the good work. It's very compelling and I enjoyed browsing the entire blog.
ReplyDeleteDigital Marketing Course in Bangalore
What a really awesome post this is. Truly, one of the best posts I've ever witnessed to see in my whole life. Wow, just keep it up.
ReplyDeletebusiness analytics course
Incredibly conventional blog and articles. I am realy very happy to visit your blog. Directly I am found which I truly need. Thankful to you and keeping it together for your new post…
ReplyDeleteAWS Training in Hyderabad
I have voiced some of the posts on your website now, and I really like your blogging style. I added it to my list of favorite blogging sites and will be back soon ...
ReplyDeleteDigital Marketing Training in Bangalore
It is late to find this act. At least one should be familiar with the fact that such events exist. I agree with your blog and will come back to inspect it further in the future, so keep your performance going.
ReplyDeleteDigital Marketing Training in Bangalore
This is a fabulous post I saw because of it. It is really what I expected to see trust in future you will continue in sharing such a mind boggling post
ReplyDeletedata scientist training and placement in hyderabad
I wanted to leave a little comment to support you and wish you the best of luck. We wish you the best of luck in all of your blogging endeavors.
ReplyDeleteData Science Training in Bangalore
I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
ReplyDeletebusiness analytics courses
You have completed certain reliable points there. I did some research on the subject and found that almost everyone will agree with your blog.
ReplyDeleteData Analytics Course in Bangalore
Very good message. I came across your blog and wanted to tell you that I really enjoyed reading your articles.
ReplyDeleteBest Data Science Courses in Bangalore
It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.
ReplyDeleteData Analytics Course in Bangalore
Extremely overall quite fascinating post. I was searching for this sort of data and delighted in perusing this one. Continue posting. A debt of gratitude is in order for sharing. best institute for cloud computing in hyderabad
ReplyDeleteI am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.
ReplyDeletedata science course in london
Great article with excellent content found very useful thank you waiting for next blog update. whatsapp mod
ReplyDeleteReally nice and interesting post. I was looking for this kind of information and enjoyed reading this one. Keep posting. Thanks for sharing. data analytics course in patna
ReplyDeleteI want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors
ReplyDeleteiot training in delhi
It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.
ReplyDeleteData Scientist Course Syllabus
Impressive. Your story always bring hope and new energy. Keep up the good work.Data Scientist Course in Vadodara
ReplyDeleteHappy to chat on your blog, I feel like I can't wait to read more reliable posts and think we all want to thank many blog posts to share with us.
ReplyDeleteData Science in Bangalore
It's like you've got the point right, but forgot to include your readers. Maybe you should think about it from different angles.
ReplyDeleteData Science Training in Kolkata
I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors
ReplyDeletedata science training in faridabad
Really, this article is truly one of the best in article history. I am a collector of old "items" and sometimes read new items if I find them interesting. And this one that I found quite fascinating and should be part of my collection. Very good work!
ReplyDeleteData Scientist Training in Bangalore
Thanks for the lovely blog. It helped me a lot. I'm glad I found this blog. Thanks for sharing with us, I too am always learning something new from your post.
ReplyDeleteData Scientist Training in Bangalore
Good blog and absolutely exceptional. You can do a lot better, but I still say it's perfect. Keep doing your best.
ReplyDeleteData Science Training in Nagpur
I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, will provide more information on these topics in future articles.
ReplyDeletedata science course in london
Very informative message! There is so much information here that can help any business start a successful social media campaign!
ReplyDeleteData Scientist Course in Bangalore
Very informative message! There is so much information here that can help any business start a successful social media campaign!
ReplyDeleteData Scientist Course in Gorakhpur
Very informative message! There is so much information here that can help any business start a successful social media campaign!
ReplyDeleteData Scientist Course Syllabus
This blog was really great, never seen a great blog like this before. i think im gonna share this to my friends..
ReplyDeleteData Scientist Training in Bangalore
You can take admission to one of the top institutes that offer degrees in data science. In this way, you will learn all the requirements of the field under one roof.
ReplyDeletedata science training in lucknow
It's late finding this act. At least, it's a thing to be familiar with that there are such events exist.
ReplyDeleteI agree with your Blog and I will be back to inspect it more in the future so please keep up your act.
360DigiTMG data science course
I truly adored visiting your post and this content was very unique. Thanks a lot for sharing this...
ReplyDeleteChild Support Virginia
Best Female Family Law Attorney
I truly adored visiting this articles and unique contents
ReplyDeletebankruptcy lawer near me
bank ruptcy lawyers near me
Thanks for sharing beautiful content. I got information from your blog.keep sharing
ReplyDeletecómo solicitar el divorcio nueva jersey
Abogado Tráfico Smyth Virginia se traduce al español como "Abogado de Tráfico en Smyth Virginia".
ReplyDelete"Abogado de Tráfico" se refiere a un abogado que se especializa en asuntos relacionados con el tráfico, como multas, infracciones, accidentes de tráfico, entre otros. Abogado Tráfico Rockbridge VA