Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
How Data Breaches Affect the EnterpriseData breaches continue to cause negative outcomes for companies worldwide. However, many organizations report that major impacts have declined significantly compared with a year ago, suggesting that many have gotten better at containing breach fallout. Download Dark Reading's Report "How Data Breaches Affect the Enterprise" to delve more into this timely topic.
Incident Readiness and Building Response Playbook
In this special report, learn the Xs and Os of any good security incident readiness and response playbook.
Tweet This
0 Comments
User Rank: Apprentice
2/17/2016 | 6:58:17 PM
From fake 'demo' disks for 5 1/4" drives to downloads off websites, it's the employee that is the primary entry point for attacks.
How do you educate your employees? How do you justify this kind of training to management? Well, good luck.
Most managers are unaware of the vlunerability of thier groups/division/organization's staff to these attacks. And you will be marked down as a Chicken Little if you push the problem in an open forum.
The best way is to include training and warnings for new hires - it's an 'inoculation' process.
This leaves the 'old guard' to educate - and they are often the most vlunerable. The person who deals with appointments for salespeople, the person who answers the phone (and, by the way, gets all the undeliverable emails....).
Filtering/deleting all the undeliverable emails is a good first line of defense - or you can divert these messages to someone who has more familarity with attacks. But this drains your resources - better to just trash the undeliverables.
But many institutions have staff who have been there since before cell phones were invented - how do you deal with them? I have tried many times and found the 'gaming' strategy works best - build up a collecton of attacks and make it into a game - tell them it's something to play with. When they fall for an attack don't scold, explain. Remember the old country doctor whose 'bedside manner' could settle most problems? Take that approach - you are often the new person on the staff teaching the person with the longest tenure - be humble and explain, explain, explain. If they don't understand it's not their fault - it's yours. Try another approach - you CAN make it work.
And - best of luck.
wb