{"id":239093,"date":"2022-10-05T01:58:17","date_gmt":"2022-10-04T23:58:17","guid":{"rendered":"https:\/\/mypr.co.za\/?p=122427"},"modified":"2022-10-05T01:58:17","modified_gmt":"2022-10-04T23:58:17","slug":"lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees","status":"publish","type":"post","link":"https:\/\/www.myza.co.za\/press\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees\/","title":{"rendered":"Lack Of Cyber Awareness Training Is The Weakest Link In Security Strategies \u2013 Not Employees"},"content":{"rendered":"<aside class=\"scaip scaip-1 \">\n<aside id=\"republication_tracker_tool-2\" class=\"republication_tracker_tool clearfix\">\n<h5 class=\"adtitle\">Republish for Free<\/h5>\n<div class=\"license\">\n<p><button name=\"Republish This Story\" id=\"cc-btn\" class=\"republication-tracker-tool-button\">Republish This Story<\/button><\/p>\n<p><a class=\"license\" rel=\"noreferrer license noopener\" target=\"_blank\" href=\"http:\/\/creativecommons.org\/licenses\/by-nd\/4.0\/\"><img decoding=\"async\" alt=\"Creative Commons License\" class=\"lazyload\" src=\"http:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2022\/10\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees.png\"><\/a><\/p>\n<p><img decoding=\"async\" alt=\"Creative Commons License\" src=\"http:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2022\/10\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees.png\"><\/div>\n<div class=\"message\">\n<p>Republish our articles for free, online or in print, under a Creative Commons license.<\/p>\n<\/div>\n<\/aside>\n<\/aside>\n<p><a href=\"https:\/\/mypr.co.za\/?attachment_id=122428\"><img loading=\"lazy\" decoding=\"async\" alt width=\"300\" height=\"169\" class=\"alignleft wp-image-122428 size-thumbnail lazyload\" src=\"http:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2022\/10\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees-1.png\"><\/a><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-122428 size-thumbnail\" src=\"http:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2022\/10\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees-1.png\" alt width=\"300\" height=\"169\">With human error consistently revealed as the cause or catalyst in 85% of cyber security breaches, company employees often get the wrap for being at fault or labelled as \u201cthe weakest link\u201d. Rather than blaming employees for doing something they shouldn\u2019t, companies should consider the quality of cyber security education employees are getting and question if it is changing behaviour.<\/p>\n<p>Cyber awareness training that is effective at changing behaviour can reduce organisations\u2019 risk of cyber threats by 70%.<br \/>This is according to Isabel Adams, People Enablement Director, at AVeS Cyber Security.<\/p>\n<p>\u201cIt\u2019s fair to say that there\u2019s a human element in most cyber breaches. But it is not fair to leverage the blame entirely on users. The quality of cyber education, or lack thereof, is to largely blame. A lot of the time, company users unknowingly expose company networks and data when they use unauthorised apps, browse malicious websites, click on unsafe links in emails, respond to phishing emails, or share information on social media. However, if they were trained well enough to truly understand how they are vulnerable and avoid the behaviours that could put them at risk, they wouldn\u2019t have done it.\u201d<\/p>\n<p>Cyber awareness training tends to stop at awareness rather than working to change risky behaviours and instil a culture of cyber safety. Because cybercriminals are using emotional tactics and innovative vector attack methods, even with the most advanced and effective cyber security technology interventions in place, and some level of awareness training, the human element will remain a threat if there is no behavioural change. This can only happen with true understanding.<\/p>\n<p>Adams says it\u2019s important to bring it home that cyber safety and using internet resources and social media responsibly is not only about protecting company information and digital assets. It\u2019s about protecting people too. Helping people understand that individuals are also targets of cyberattacks empowers them to instil responsible, cybercrime-wise behaviours to protect their own social media profiles, bank accounts and identities.<br \/>\u201cCyber awareness training can\u2019t be an information dump of overwhelming content. It must be personal and relatable, or it will remain adversarial and the disconnect between awareness and behavioural change will prevail,\u201d stresses Adams.<\/p>\n<p>Awareness and applying critical thinking are the basics of cyber awareness. Knowing what phishing is and how to identify a fraudulent email, or knowing that login credentials shouldn\u2019t be shared, are foundational topics upon which cyber-safe behaviours can be built.<\/p>\n<p>Many companies have yet to get these basics in place. Cyber security awareness starts and ends with a poster on a wall or a list of security policies circulated by email. In these scenarios, employees might have some awareness and know there are processes and policies to follow but they don\u2019t understand why, what to do, or how their actions could impact the company or them as individuals.<\/p>\n<p>Human error happens in several ways when there is a low perception of risks and roles. Skill-based errors happen when employees haven\u2019t been shown the skills to identify scams or how not to respond to them. Other errors occur due to poor decision-making because they don\u2019t understand the risks.<\/p>\n<p>Cybercriminals go to great lengths to mask their scams and affect their attacks. They use inventive social engineering techniques to appeal to human emotions and trick people into giving away sensitive information, such as passwords and credit card numbers. Phishing is no longer an email-only problem. It happens on social media, through phone calls, called vishing (the fraudulent practice of pretending to be from reputable companies to get people to reveal personal information), and through SMS, to name just a few.<\/p>\n<p>\u201cIt\u2019s easier for cybercriminals to \u2018hack\u2019 a human compared to attempting to break through technology. They\u2019re efficient at gathering data on their targets. By combing through employees\u2019 public social media profiles, they collect valuable data on a person\u2019s interests, jobs and activities. Every social media post and photo may contain important data that threat actors could use for social engineering.<\/p>\n<p>\u201cEmployees not only need to be aware of these tactics, but they also need to know how to guard their emotions and understand what actions to take or not to take. It goes back to behaviour and changing that which makes companies and people vulnerable. The mere fact that you received a phishing email is not sinister. It\u2019s what you choose to do with it that\u2019s potentially dangerous.\u201d<\/p>\n<p>Adams concludes by saying that inculcating a cyber security culture can create a stronger defence against cyber threats than the most robust technologies or any single policy or procedure.<\/p>\n<p>\u201cInvest in proper training and embrace cyber security as a core business and personal value.\u201d<\/p>\n<p>October is Security Awareness Month, and AVeS Cyber Security will be hosting three one-hour cyber security awareness webinars, free of charge on 4 October at 10h00, 12 October at 10h00 and 19 October at 14h00. Contact info@aves.co.za for more information and to register.<\/p>\n<p><a href=\"http:\/\/mypr.co.za\/contact\/featured\/\">CLICK HERE to submit your press release to MyPR.co.za<\/a>.<\/p>\n<p> <span class=\"post-views-icon dashicons dashicons-chart-bar\"><\/span> <span class=\"post-views-label\">Press Release Views since 1 July 2022:<\/span> <span class=\"post-views-count\">135<\/span> <\/p>\n<div class=\"entry-pagination pagination\">Pages: <span class=\"post-page-numbers current\"><span class=\"screen-reader-text\">Page <\/span>1<\/span> <a href=\"https:\/\/mypr.co.za\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees\/2\/\" class=\"post-page-numbers\"><span class=\"screen-reader-text\">Page <\/span>2<\/a><\/div>\n<p><a href=\"https:\/\/mypr.co.za\">Source: MyPR.co.za<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Republish for Free Republish This Story Republish our articles for free, online or in print, under a Creative Commons license. With human error consistently revealed as the cause or catalyst in 85% of cyber security breaches, company employees often get the wrap for being at fault or labelled as \u201cthe weakest link\u201d. Rather than blaming [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":239094,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","ngg_post_thumbnail":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[9021,1],"tags":[3257],"class_list":{"0":"post-239093","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-mypr","8":"category-south-africa","9":"tag-mypr","10":"entry"},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2022\/10\/lack-of-cyber-awareness-training-is-the-weakest-link-in-security-strategies-not-employees.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/239093","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/comments?post=239093"}],"version-history":[{"count":0,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/239093\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media\/239094"}],"wp:attachment":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media?parent=239093"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/categories?post=239093"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/tags?post=239093"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}