Relying on “IT or…infosec professionals” for company security is “outdated and dangerous”
What is missing in your infosec efforts?
Will just one more (or a dozen more!) tool or program, or app, or some addition to your IT stack mitigate the risk of bad actors gaining access to your data, intellectual property, or trade secrets?
The idea that company security relies upon the IT department or a small team of infosec professionals is outdated and dangerous.
Social engineering techniques frequently trick employees at all levels of an organization into bypassing security systems. Human error is the leading cause of data breaches, responsible for 88 percent, according to Stanford University research. While a business may not accept that every employee should be part of its security efforts, there’s no doubt that threat actors see them all as potential targets.
Your organization has a network of non-artificially intelligent sensors already attached to your IT systems. Your humans--from the loading dock to the C-suite.
How can you best tune and train that network? How can you enlist that network into the complicated task of situational awareness, monitoring, reporting, and counter-acting to mitigate threats to your crown jewels?
How about creating a coordinated intelligence-led risk mitigation network on the Human Side? Humans as sensors on the front line. Intelligent sensors who understand changes happening around them, are trained, and know what to do, what/when/who to report anomalies.
Or maybe see your people as a "Threat" and layer on one more technical "solution"?
A Human-Centered risk mitigation solution acknowledges the strengths and weaknesses of our humans. This solution empowers our humans, when they're attacked, when they're vulnerable, when they're strong. A Human-Centered risk mitigation solution integrates the technical with the human--looping in HR, Legal, Security, IT, Cyber, Operations. A Corporate Counterintelligence solution with a Human Face.
What are you doing to empower your Humans?