NCSAM 2017 Week 2
Cybersecurity in the Workplace is Everyone’s Business
All organizations – from large and small businesses to healthcare providers, academic institutions, government agencies and – creating a culture of cybersecurity from the break room to the board room is essential and a shared responsibility among all employees.
STEPS TO A CYBER SECURE ORGANIZATION
As the world becomes more connected, all organizations face growing risks for cybersecurity attacks. According to the 2016 Symantec Internet Security Threat Report, the number of breaches exposing more than 10 million identities went up 125 percent from 2014 to 2015, and 429 million identities were exposed in breaches in 2015.
The National Cyber Security Alliance (NCSA) recommends a top-down approach to building a culture of cybersecurity in the workplace. Leadership must start from the top and begin by identifying the critical information to protect – or “crown jewels” – such as consumer data, employee data, copyrights and intellectual property and securing that information.
NCSA recommends taking the following steps developed by the National Institute of Standards (NIST) and building a plan to keep your business cybersecure:
- Identify your digital “crown jewels”
- Protect your assets
- Be able to detect incidents
- Have a plan for responding
- Quickly recover normal operations
Learn more about creating a culture of cybersecurity at your workplace with this infographic, courtesy of NCSA.
Employee awareness and training are also key elements of fostering cybersecurity in the workplace; the number of spear-phishing campaigns targeting employees increased 55 percent from 2014 to 2015.
To address these needs, in addition to the information security advisories, best practices and resources available on this web site, ITS provides annual information security awareness training for the entire college community. In addition, information security training materials and other resources are shared within the college throughout the year.
- CyberSecure My Business
- U.S. Department of Homeland Security Critical Infrastructure Cyber Community Voluntary Program
- Better Business Bureau: Data Security Made Simple
- Better Business Bureau: The 5-Step Approach
- Federal Trade Commission: Data Security
- U.S. Small Business Administration (SBA) Managing a Business – Cybersecurity
- Logical Operations CyberSAFE Readiness Test