Cultivating a Cybersecure Culture Works

Blog

The battle against cybercrooks is far from over.

Apr 30, 2024

IT Compliance, Cybersecurity

The battle against cybercrooks is far from over. Here are some disturbing statistics from recent research as evidence:

A sampling of various studies puts the rise of ransomware year over year between 125%-150%
Analysts identified at least 25 new ransomware gangs last year
Surveys continue to measure the proportion of data breaches attributable to human error – such as succumbing to common social engineering stunts that implant ransomware – at eight in every 10

But here’s one encouraging finding to alleviate from this same field of study: Researchers found the number of cybercrime victims paying ransoms dropped to a record low during Q4-2023, tumbling by nearly 30%.

Why? Analysts credit continuing efforts by organizations of all types and sizes to cultivate cybersecure culture.

What is a cybersecure company culture? In basic terms, businesses fostering cybersecure culture:

Provision for expert resources inside and outside the firm’s physical and virtual borders, because cybercriminals respect neither of those boundaries.
Invest in continual education for team members at all levels of the organization – from frontline to executive suite.
Empower diligent defense by holding workers at all levels accountable to rigorous cybersecurity policies, processes and practices.

How can leaders of small to medium-size businesses (SMBs) develop and promote cybersecure culture in their organizations? We advocate a 3-step approach:

Create and strengthen security policies that cover device usage, network access privileges and breach response and recovery plans.
Implement regular awareness and training programs that teach all employees vigilance is critical and time is of the essence.
Monitor and measure network traffic and user behaviors to set benchmarks as a backdrop for identifying irregularities and outliers – potential alerts to malicious activities.