Rapid Implementation COVID-19 Solutions Available

Unintended Disclosure: Are You Educating Your Weakest Link?

Oct 9, 2018

Back to Veoci BlogUnintended Disclosure: Are You Educating Your Weakest Link?

Preventing unintended disclosure

Organizations spend hundreds of thousands of dollars hardening their systems with all the latest cybersecurity technologies.  But many often fail to address the human element, especially when it comes to phishing and unintended disclosure.  In this day and age, everyone in an organization needs some fundamental knowledge of information security threats.  It should be common knowledge, like HR policies.  By not educating its people, an organization can end up with vulnerabilities much bigger than hackable code.

System glitches account for a large portion of data breaches, but in fact the majority of data breaches are due to human error and unintended disclosure via phishing. It’s most often the people who aren’t part of the security team, the employees who are just going about their normal routines, who are the biggest security risk.

Take a sales team, for example.  Sales people spend their lives sharing information with their internal and external “partners”.  They are very used to being an informational conduit between the organization and the external world. This personality and work strength may become a threat if someone calls in phishing for information and the “ever happy people connector” isn’t aware that information they inadvertently disclose WILL be used against them.

Of course encryption, forcing strong passwords, firewalls, antivirus, intrusion detection, updating, patching, and scanning your systems is extremely important, but the reality is that preventing unintended disclosure through education is the least technical and most inexpensive tool you can apply.

When I worked as a security professional at a Fortune 500 company a few years ago, our training was essentially me going around and putting notes such as “you got hacked” on someone's computer if they hadn’t locked it when walking away from their desk. Of course, this is nonsense but it did establish imagery in people’s minds about opening access to their data.  We evolved our training to awareness sessions, newsletters, and phishing simulations, which we then shared in awareness sessions to improve people’s understanding of the current security threats. You have to adapt your training to the size and maturity of your organization but whichever it is, you must start somewhere.

There is a common phrase in the cybersecurity community: “It’s not a question of IF you’ll get hacked, but WHEN.” I would add that with the proper tools AND proper education, you have a much higher chance of beating the odds.

Glenn Carstens-Peters via Unsplash

Subscribe to the Veoci Blog

Receive all the latest emergency, crisis, and continuity management news, tips, and advice

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Related Posts

The CCPA, Incident Response, and Business Continuity

There are notable differences between the two laws, however, and those differences are worth a discussion. In a past blog, we explored the impact of the GDPR on crisis management and business continuity, so we’re going to do something similar for the CCPA. What does the CCPA mean for incident response and business continuity?

Continue reading
Implementing and Managing Business Continuity Programs in Large and Complex Institutions: A Discussion with MIT, NYU and VCU

The business continuity and emergency management managers of MIT, NYU, and VCU came together for a panel discussion on the challenges—and solutions—of being the engines behind these vital programs.

Continue reading
Why Business Continuity Planning is More Important than Ever Before

Risks today are increasingly interconnected, and the future forecasts a tighter bond will form between them. And thanks to the modern world’s web of risks, businesses and organizations can never be sure which dominoes will fall when an incident kicks off. Preparation, through business continuity planning, is essential for any entity hoping to have a lasting impact.

Continue reading

Connect with us on Social Media

Join us on our journey to improve emergency, operations, and continuity management!

Veoci Facebook PageVeoci Twitter AccountVeoci Linkedin Company Page

Face crisis and continuity challenges with expert solutions designed for you and your teams.

Learn how Veoci puts you in control