Promoting a security culture in your organisation

9
How to promote a security culture In your organisation

Transcript of Promoting a security culture in your organisation

Page 1: Promoting a security culture in your organisation

How to promote a security cultureIn your organisation

Page 2: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

Security culture

Vital to ensure organisation and assets are protectedNo longer CIO or IT department responsibilityNeed to consider the human factorNeed to get buy in from all employeesAll employees are responsible and must be security conscious

Page 3: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

How to promote a security culture?

Provide data security training to end usersEmployees biggest asset but also weakest link in security chainEducate them on how everyday tasks can put company at riskHave they read the company security policy?Do they understand your security policy?

Educate themFace to face trainingOnline training

Page 4: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

Make it real

Use real-life examplesCreate examples directly related to employee’s individual roleSpoof email to a CFO from a CEO

Caused significant losses to companies who were lured into initiating wire transfers

Real examples helps people relate to scenarios And understand how to be more security aware

Page 5: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

What to include in security training

What data security means and how it affects employeesHow to create and keep passwords safeImportance of using passcodes on portable devicesWhat to do if a suspicious email is receivedWhat to do if you think you have a virus or malware on your deviceWhat do if something strange happens on their computerWhat is a secure Wi-Fi spot

Page 6: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

Keep it fresh with regular reminders

Keep the conversation going at every level Think up new ways to keep security consciousness top of mindShort podcasts eg Chet Chat podcasts from SophosVideos - watch the movies

Page 8: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

Finally……..

Read more on the Trilogy blog Sophos podcastsSophos videos

Page 9: Promoting a security culture in your organisation

INNOVATING, EMPOWERING, TRANSFORMING

www.trilogytechnologies.comManaged services company of the year 2015Business IT Services company of the year 2016