Changing Perspectives

Cyber security is much more than just an IT problem. To solve it, we need to have the ideas embedded across the organisation - and this won't work with annual CBT and fear-based messaging.

Transcript

1. Changing Perspectives Making Security Everyone’s Problem
2. Isn’t Security an IT Problem?  It’s only IT security, and that’s only about the technology  It’s only IT security, systems just need to be protected from the bad guys  It’s only IT security, I just need to pick a good password  It’s only IT security, I just need do this year’s CBT
3. What needs to change? TRAINING ONCE A YEAR IS NOT ENOUGH UNDERSTANDING LEADS TO PERSONAL RESPONSIBILITY FEAR AS A MOTIVATOR LEADS TO STRESS AND EXHAUSTION
4. Continuous awareness Regular micro-bulletins Beyond the technology Removing the veil of secrecy
5. Fostering understanding
6. Constant fear leads to Hypervigilance Hypervigilance Apathy Apathy or
7. So we need to Maintain constant communication and micro- training rather than annual CBT 1 Educate and help understanding instead of telling people what to do 2 Use positive messaging, saving fear for when it’s truly justified 3
8. Where do we end up? Reduce negligence Better awareness Sense of ownership Security has an easier life 2018 Incidents External Attacker Internal Negligence Internal Malicious
9. “A central topic of my essays is cybersecurity. A fundamental and delicate question at the heart of my work is: how to motivate my readers to want to learn more.” - Ludmilla Morozova-Buss