The human firewall and modern cyber defence
Source: Middle East Insurance Review | Jan 2023
Companies scrutinise the way the cyber attack surface is protected by technical tools and processes, yet losses and breaches still occur and that is because something crucial is being left out of the picture, according to a new weblog by specialty insurer NMU.
The weblog said in the current insurance market, organisations are expected to maintain rigorous security controls still 80% of data breaches in 2021 were caused by user error according to an analysis of the UK’s Information Commissioners Office data.
The weblog said as persisting ransomware attacks fuel rising cyber crime, organisations need to fortify the human firewall to mitigate their exposures. Every single day workers are subject to phishing emails, CEO fraud attempts, spear phishing and wire transfer fraud gimmicks. If the staff can be trained, and their decision-making abilities tested, these attacks can be prevented at the human firewall.
Training, phishing simulations, and workplace culture are the trifecta for building human defences.
Training establishes baseline cyber hygiene knowledge and makes connections between information and application. Training should include live and computer-based modules. Phishing simulations allow employees to learn and even make mistakes in a controlled environment where they improve behaviour and reflexes to these malicious emails.
Training and phishing simulations are a must-have combination – providing a sort of 1-2 punch by broadening knowledge and demonstrating good cyber behaviour, improving employee reflexes.
It’s important to recognise that not all training programmes are built alike when evaluating options and implementing training. M