登录查看更多内容

How can you implement digital security best practices in business management?

由人工智能和领英社区提供技术支持

Digital security is crucial for any business that relies on technology, data, and online transactions. Cyberattacks, data breaches, and identity theft can cause serious damage to your reputation, finances, and operations. As a business manager, you need to implement digital security best practices to protect your assets, employees, and customers. Here are some tips on how to do that.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

Berna Baysal
Miguel Angel Bárcenas

Lider Proyectos Especiales en Central de Alarmas de Mexico
Andrés J. Arenas Falótico, SFHEA, MBA, MEd., Ph.D.

Nominated as Best University professor in Spain 2024. Professionally certified by Harvard Businessmentor. Award…

1 Assess your risks

The first step is to identify and prioritize the potential threats and vulnerabilities that your business faces. You can use a risk assessment framework, such as NIST or ISO, to evaluate your current security posture and gaps. You should also consider the legal and regulatory requirements that apply to your industry and location. Based on your assessment, you can develop a security strategy and action plan that aligns with your business goals and budget.

添加您的观点

Berna Baysal
举报内容
Conduct a thorough risk assessment to identify potential threats and vulnerabilities to your business, is a first step for defining the gaps from your ideal state, as shall be set according to referred standards together with the legal requirements. Evaluation of the impact and likelihood of various risks to prioritize and address them effectively, is the step where the decisions that would effect business processes will be starting - which depends on a company/institutions' risk appetite, within the set frame. As much as covering all the risks could be ideal from a risk management point of view; budget constraints, preserving a dynamic structure, HR constraints are some of the factors for picturing risk mitigation.

已翻译

赞
Miguel Angel Bárcenas

Lider Proyectos Especiales en Central de Alarmas de Mexico
举报内容
Sin lugar a duda el eslabon debil y por ende la mas vulnerable siempre sera el factor humano por lo cual se deben hacer campa?as de concientiozación y de deteccion a fin de evitar una filtracion por negligencia, pero obviamente esto debe ser parte del analisis de vulnerabilidades a fin de establecer los protocolos necesarios que deberan acatar todo el personal incluyendo al personal directivo, que muchas veces termina siendo tu vulnerabilidad mas grande ya que por jerarquia piensan que pueden tener la mayor libertad sin asumir el riesgo que esto implica.

已翻译

赞
Juan Garduno

"Today, despite my age, I feel better now than I ever was"
举报内容
La seguridad TI (planes y herramientas) orientado a un control con -múltiples- capas de defensa: Identity (AAD, ADDS) Endpoints (Intune) Application (protección contra DDoS -ataques por denegación de servicio distribuido- de Azure Network (Azure Bastion, configurar a nivel de red las URL "expuestas" (ISP) y con eso tener front-ends web seguros Infrastructure: SIEM en la nube que hace análisis de seguridad) Data (Azure Data Factory en volúmenes de datos críticos, o conexiones que encriptan los datos en tránsito MS Purview (para los datos que están fuera de Microsoft 365) en portal, proporcionan un servicio unificado de gobernanza de datos ubicando los orígenes de datos y de clasificación (Label) tanto en los datos locales, multi-nube y SaaS

已翻译

赞

2 Train your staff

The human factor is often the weakest link in digital security. Many cyberattacks exploit the lack of awareness or negligence of employees, such as phishing, malware, or social engineering. Therefore, you need to train your staff on how to recognize and prevent common cyber threats, how to use secure passwords and encryption, how to report and respond to incidents, and how to follow your security policies and procedures. You should also conduct regular tests and audits to measure and improve your staff's security performance.

添加您的观点

Andrés J. Arenas Falótico, SFHEA, MBA, MEd., Ph.D.

Nominated as Best University professor in Spain 2024. Professionally certified by Harvard Businessmentor. Award winning, Aneca Accredited, Neogeneralist-Future Thinker - Dr in Management
举报内容
It may seem incredible, but the "other" weakest link emerges when top management in small and medium-sized companies is unaware of the ongoing "Online security" issues. A phenomenon called "cybersecurity overconfidence" exists, wherein executives may underestimate the potential impact of cyberattacks on their companies. Perhaps they've never experienced an attack, lack knowledge in the field, or face budget constraints. Some executives may overly rely on technological solutions, believing that investing in the latest cybersecurity tools suffices to protect the organization. This reliance can foster a false sense of security. The question arises: "Train your staff" or train yourself?

已翻译

赞
?lker ARABACI
举报内容
One thing I've found useful is to simulate phishing attacks. This training exercise helps staff recognize and properly react to security threats, greatly reducing the risk of a breach.

已翻译

赞

3 Update your systems

Outdated or unpatched software and hardware can expose your business to unnecessary risks. Hackers can exploit the known vulnerabilities and flaws in your systems to gain access, steal data, or disrupt your operations. To prevent this, you need to update your systems regularly with the latest security patches and fixes. You should also use antivirus, firewall, and backup software to protect your devices and data from malware, intrusions, and loss. Additionally, you should dispose of any obsolete or unused equipment securely.

添加您的观点

4 Encrypt your data

Data is one of your most valuable assets, and you need to protect it from unauthorized access or misuse. Encryption is a process that converts your data into a code that only authorized parties can read. You should encrypt your data both in transit and at rest, meaning when you send or receive it over the internet, and when you store it on your devices or cloud services. You should also use strong encryption standards and keys, and manage them carefully.

添加您的观点

?lker ARABACI
举报内容
Encrypting data has always been a non-negotiable in the systems I've 'managed.' Using strong encryption standards for data at rest and in transit ensures that even if a breach occurs, the information remains unreadable to unauthorized users.

已翻译

赞

5 Secure your network

Your network is the backbone of your digital operations, and you need to secure it from external and internal threats. You should use a VPN (virtual private network) to create a secure connection between your devices and your network, especially when you use public or untrusted Wi-Fi. You should also segment your network into different zones with different access levels and controls, depending on the sensitivity of the data and functions. Furthermore, you should monitor your network activity and traffic for any anomalies or signs of compromise.

添加您的观点

6 Review your vendors

Your digital security is not only dependent on your own actions, but also on the actions of your vendors, suppliers, and partners. If they have poor security practices or suffer a breach, they can compromise your data or systems as well. Therefore, you need to review your vendors' security policies and standards, and ensure that they comply with your expectations and requirements. You should also establish clear contracts and agreements that define the roles and responsibilities of each party, and the consequences of any security incidents.

添加您的观点

?lker ARABACI
举报内容
During my 'interactions' with third-party services, I've 'observed' that it's crucial to ensure they also follow strict security practices. Evaluating their security measures as part of the vetting process can mitigate risks that might come from outside your organization.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Business Management

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you implement digital security best practices in business management?

1

2

3

4

5

6

7

1 Assess your risks

2 Train your staff

3 Update your systems

4 Encrypt your data

5 Secure your network

6 Review your vendors

7 Here’s what else to consider

Business Management

给文章评分

感谢您的反馈

更多Business Management相关文章

更多相关阅读内容

How can you implement digital security best practices in business management?

1

2

3

4

5

6

7

1 Assess your risks

2 Train your staff

3 Update your systems

4 Encrypt your data

5 Secure your network

6 Review your vendors

7 Here’s what else to consider

Business Management

给文章评分

感谢您的反馈

查看其他技能