Digital Transformation is a driving local, national and global business, while entirely depending on Information Communications Infrastructures and Internet. With the global trends of creating multinational teams all over the working on the same projects, the proper understanding of Cyber and Information Security is critical for everyone working in the organization. What are the best practices in promoting proper training and security policies in industry, business and government organizations today?
The same way we create a culture of (human) safety in an industrial facility such as a factory or an oil refinery. This is done by showing the damage that can be done by a security breach (one can give many examples) and by "constantly" reminding people of the proper security procedures to be followed in their daily activities. The keyword here is "constantly". The same way a factory puts up signs everywhere to remind people to wear helmets.
Information security has to be taken into account during the design of the system, and not be considered as an "add-on" that can just be plugged-in later. A security policy has to be documented which identifies mainly the sources of threats and the procedures to be carried out by stakeholders during regular activities of their job and during IT security incidences. Each stakeholder must be aware of the threats, and how damaging they may be to their job and the company in general. Also, each one, after initial security training, should be handed the part of the security policy that applies to their position in the company. A mailing list (or any sort of notification system) should be set up specifically to inform stakeholders of security incidences, current threats, new procedures, etc. and to remind them of their duties in keeping information safe.
- Badges
- Science topic
- Similar topics
- Computer Communications (Networks)
- Simulators