Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Practical Network Security Approaches for a Multicloud, Hybrid IT WorldThe report covers areas enterprises should focus on for their multicloud/hybrid cloud security strategy:
-increase visibility over the environment
-learning cloud-specific skills
-relying on established security frameworks
-re-architecting the network
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Apprentice
2/17/2016 | 6:58:17 PM
From fake 'demo' disks for 5 1/4" drives to downloads off websites, it's the employee that is the primary entry point for attacks.
How do you educate your employees? How do you justify this kind of training to management? Well, good luck.
Most managers are unaware of the vlunerability of thier groups/division/organization's staff to these attacks. And you will be marked down as a Chicken Little if you push the problem in an open forum.
The best way is to include training and warnings for new hires - it's an 'inoculation' process.
This leaves the 'old guard' to educate - and they are often the most vlunerable. The person who deals with appointments for salespeople, the person who answers the phone (and, by the way, gets all the undeliverable emails....).
Filtering/deleting all the undeliverable emails is a good first line of defense - or you can divert these messages to someone who has more familarity with attacks. But this drains your resources - better to just trash the undeliverables.
But many institutions have staff who have been there since before cell phones were invented - how do you deal with them? I have tried many times and found the 'gaming' strategy works best - build up a collecton of attacks and make it into a game - tell them it's something to play with. When they fall for an attack don't scold, explain. Remember the old country doctor whose 'bedside manner' could settle most problems? Take that approach - you are often the new person on the staff teaching the person with the longest tenure - be humble and explain, explain, explain. If they don't understand it's not their fault - it's yours. Try another approach - you CAN make it work.
And - best of luck.
wb