Cyberattacks are becoming increasingly frequent and complex these days. Well-functioning IT security is a requirement, yet despite this security, sensitive information still frequently ends up in the public domain. After all, the greatest cyber threat is the personnel within a company. IBM Cyber Security Intelligence Index indicates that 95% (!) of cyberattacks are caused by inattentive employees. This can have quite drastic consequences; clicking on a malicious email is enough to result in crucial information being stolen, meaning that a single click can ultimately cost you dearly. Naturally, an obvious question remains: how can we prevent employees themselves from being the biggest cyber threat?
Can cyber threats be prevented with training?
It is not entirely clear whether cyber threats can be prevented by employees themselves. Opinions on this are divided, and research results are contradictory. A workplace free from cyber threats is very difficult/virtually impossible to achieve. A large number of training sessions are provided, but people quickly forget them after a few months, and organizing training on a regular basis is time-consuming and expensive.
Stay alert!
Employees must remain alert to existing (potentially new) threats, how to recognize them, and what can be done about them. At Best4u, we keep each other up to date on potential digital dangers via our communication system and deal with them daily. We believe the key lies in repetition. One training session per year will not solve the problem, but multiple sessions plus continuous repetition can ensure that people think three times before clicking on something.
Perfect cybersecurity is impossible
Even online experts sometimes make mistakes. Because hacks are so sophisticated these days, in many cases people don't even realize they have been hacked. You can never really know for sure, but it must, of course, be prevented as much as possible.
Yes or no?
Hyppönen, CRO of F-Secure, is even more pessimistic. He states that "Users will never learn, and training is pointless. People keep clicking on suspicious links and entering their data everywhere and nowhere." We personally believe that a great deal can be prevented with the right information, provided in the right way, and at the right frequency. What do you think?