Ever go on a date that seemed to be going well, with lots of conversation flowing? Did you share more than you intended?
With mobile devices increasingly becoming an extension to our daily lives, it is easy to forget that all those fleeting comments and idle searches are stored locally or on applications. How could this tiny vessel of knowledge in our pocket be a cause for concern?
Time to Make Security Personal
Cyber psychologists suggest that disclosures and behaviors are enhanced online, just like oversharing on a first date. Inhibitions are reduced and conversations are falsely considered private.
A device is the proverbial diary in your pocket, but it is made available online. You are accessible to online friends. Your information is collated and available to corporations because you accepted a license agreement that allows applications access to device data, private or professional.
The traditional office is dead. From a business perspective, more data is available online on devices beyond corporate borders, which often hold both personal and professional applications. This is a fundamental corporate risk. It’s time to make security personal.
The Changing Face of Cybercrime
Who is the typical cybercriminal of today? It’s no longer a mythical hooded person in a basement, but that well-dressed older lady to your left or the young, dapper gentleman to your right. Tools and tutorials are readily available, meaning anyone and everyone is a potential attacker.
As the face of the stereotypical cybercriminal has changed, as has the motivation for committing cybercrimes. However, we typically only hear about complex, sophisticated attacks in the media that reinforce the illusion that the average user is reasonably safe.
Hackers’ motivations range from white-hat or altruistic efforts to personal problems, desperation, financial gain or simply because they can. The biggest lure to cybercrime is the perception that it is low risk and anonymous. Once a single device has been breached, the opportunities for a threat actor only multiply. Who is liable in these cases?
Make Personal Security Your Business
The eyes of most employees glaze over when they hear about security policies or experience a sense of guilt when IT sends an email. It’s important to understand what matters to people today. How many employees are unsure about their personal security online? Do they have concerns about their children or older parents online? If they have a vested interest in security, they will adopt secure behaviors.
Why spend a fortune securing assets if someone leaves the door open? Make security personal. If awareness is interesting, current and personal, people will want to listen. Tell a security story, reward good behaviors and encourage questions. Speak the language they want to hear and ask what their concerns are. Keep it relevant to them.
Awareness efforts simply need to interest people personally to be effective professionally. That’s why it’s critical to make security personal and help users become the masters of their own safety.
Listen to the podcast: Take Back Control of Your Cybersecurity Now