Cloud Computing In Education

Cybersecurity Policies Must Address Internal Threats

Cybersecurity Policies

The contentious U.S. election campaign offered up many highlights, but the aftermath of election night – explosive cyberattack allegations – provided even more intrigue.

These weren’t run-of-the-mill allegations, either. In fact, U.S. intelligence officials at the CIA and FBI were adamant that Russia was behind cyberattacks during the U.S. election that were targeted against the Democratic party – part of a bid to hurt Hillary Clinton’s presidential hopes and to help get Donald Trump into the White House.

Whether Russian involvement helped Trump to become leader of the free world — Russian President Vladimir Putin has scoffed at the allegations — is up for debate. But what is certain is that cybersecurity risks are serious business – and companies need to be aware both of the risks and of how to prevent them. Successful attacks, after all, can cripple corporate networks, decimate bottom lines, and damage reputations among customers and suppliers.

It’s easy sometimes to assume that all the threats come from outside of organizations, but it’s important to understand that the real threats come from within because cyber criminals are more and more shifting their focus to attacking corporations from the inside rather than from the outside to potentially evade detection.

Yes, workers, can possibly present serious threats to security. What follows, therefore, are some tips on safeguarding businesses from the potential inside threats.

  1. Education is Key

Education is critical if businesses want to reduce the risks of cyberattacks that lead to damaging data breaches. Verizon’s 2016 Data Breach Investigations Report notes that a whopping 63% of confirmed data breach incidents were the result of weak, default or stolen passwords. The report adds that cyber criminals, employing social engineering techniques, still have little trouble convincing people click on links that lead to pages requesting personal information. For instance, the 2016 report shows that 30% of phishing messages were opened compared to 23% in 2014 — and 12% of targets ended up opening the malicious attachments or clicking on the links versus 11% in 2014. What this means is that businesses have to educate their workers so that these workers don’t become the weak links that end up compromising their networks.

  1. Manage Access

Businesses that put in place solid identity and access management policies can lessen the odds of being victimized by cyberattacks since they will be able to govern which employees have access to what information. Robust policies will help businesses to validate workers’ identities, which will then provide employees with access to only the amount of information — sensitive or otherwise — that they need to do their jobs. It’s also important that businesses monitor the online behavior of their employees. This is particularly important when it comes to accessing information that could potentially be used for financial gain, and there needs to be a clear process for revoking access right away if necessary.

  1. Mobile Considerations

In an age when many employees use mobile devices — both company-issued and personal — it’s critical that businesses not only recognize the potential threats, but also address these threats with appropriate actions. According to one source, 61% of workers use their mobile devices both for work-related purposes and for personal purposes, but many of these same workers don’t get training for how to properly use their mobile devices. The 2016 Data Breach Investigations Report, meanwhile, notes that security incidents are often caused by workers who, for instance, lose their laptops or mobile devices. It adds that 39% of theft occurs in victims’ work spaces and 34% occurs in workers’ personal vehicles. So companies need clear policies to ensure that workers understand how to safely use their mobile devices.

The threats facing corporations in this digital age are very real as cyber criminals get more and more resourceful when it comes to finding ways to access corporate networks. While it’s important for businesses to be wary of external threats that could lead to data breaches, it’s also important for them to be mindful of the internal threats when working on cybersecurity policies. This means engaging their employees so that they don’t become the weak links.

By Ian Palmer

Ian Palmer

​Having earned a Bachelor of Journalism from Carleton University in Ottawa, Ontario, Canada in 1999, Ian has covered a wide range of technology issues over the years and has written for IT related sites such as InfoSec Institute and Linux.com

15 Promising Cloud-Based Video Conferencing Services

15 Promising Cloud-Based Video Conferencing Services

Cloud Video Conferencing Services We have put together a compilation of some of the best cloud based conferencing services for businesses. The cloud video conferencing services market is expected to reach US$ 6.40 Billion by 2020 from the current $3.31 ...
Gartner’s Top 10 Predictions For IT In 2018 And Beyond

Gartner’s Top 10 Predictions For IT In 2018 And Beyond

Gartner’s Top 10 Predictions For IT In 2018 In 2020, AI will become a positive net job motivator, creating 2.3M jobs while eliminating only 1.8M jobs. By 2020, IoT technology will be in 95% of electronics for new product designs ...

SPONSORS

Moving Test and Dev to the Cloud: How the "As-A-Service" Economy Delivers Tangible Benefits

Moving Test and Dev to the Cloud: How the “As-A-Service” Economy Delivers Tangible Benefits

Moving Test and Dev to the Cloud Have you ever seen the old parlor trick in which a person pulls ...
AT&T Pinpoints 4 Key Elements To Achieving Security With The Internet of Things

AT&T Pinpoints 4 Key Elements To Achieving Security With The Internet of Things

Internet of Things Security The Internet of Things (IoT) is rapidly becoming a part of many of our business processes, ...

Cloud Community Supporters

(ISC)²
AWS
HPE
CA Technologies
Cisco

Cloud community support comes from sponsorship, service opportunities and collaborative network partnership initiatives.

Enabling Digital Transformation With Funding

Enabling Digital Transformation With Funding

IF IT’S IMPORTANT, BUDGET FOR IT When leadership issues a corporate mandate, employees are expected to execute on it. But what happens when a mandate is clear, but workers are not given the resources to do the work? During the 2018 Enaxis Leadership Forum, surveyed participants
Netflix and the Cloud

How the Cloud Became Video’s Best Friend

Netflix and the Cloud It’s official: video has now completed a successful transfer to the cloud. The outstanding example of late is Netflix’s tie with HBO for the most Emmy awards. This is the first time Netflix has tied with HBO in the Emmys, and

"Top 100 Brand Influencer, Cloud”
-ONALYTICA

"Best Cloud Computing Blog"
-SYSADMIN MAGAZINE

"Top 10 Sites For Cloud Computing"
-DIGITALISTMAG SAP

"Top 10 Cloud Computing Blogs”
-MARKETING ENVY

"Top 25 Must Read Cloud Blogs"
-CLOUDENDURE