Research confirms that cyber-security is the top issue on the agenda in boardrooms around the globe.
It’s time for the Chief Information Security Officer (CISO) to step into the spotlight as cyber-security has ascended to the forefront of the business agenda, becoming a mainstream business concern. However, CISOs can only make effective plans if they understand the context and know what business leaders, employees and consumers think about cyber-security. Will they cooperate and do whatever’s necessary to protect you and them? Or is there still work to do to win over hearts and minds?
BT Security’s largest ever research project – CISO under the Spotlight – identifies the major trends that are impacting the role of the CISO, and the worrying behaviours that show the need for a strategic response.
The research backs up what I’ve seen in so many companies: people are still fundamental to cyber-security. You can have all the solutions in the world, but if people don’t follow basic cyber-security measures, you’re wide open to breaches. Despite all the cyber-threats out there, the easiest way to infiltrate any organisation is still through an employee.
45% of employees say they’ve had a security incident while working and not declared it
Our respondents were brutally honest and what they told us is alarming. They confirmed that the human factor is the weakest point in your defences. People knowingly take risks online, even though they understand the dangers. Employees are losing work laptops and phones and not reporting it or are giving their work logins and passwords to others.
64% of consumers recommend firms that make big efforts to keep data secure
This becomes even more important because security helps attract customers. A business visibly on the cyber-security ball will reassure consumers and create confidence in its digital products and services, carving itself a competitive advantage. And that matters when only 16% of consumers strongly agree they trust large organisations to protect their personal data.
So how can a CISO combat this?
I wholeheartedly agree with the research: inside the organisation, CISOs need to look beyond technological solutions and super-charge the human firewall. Start by sharpening up security hygiene so your people adopt digitally safe behaviours and are actively on their guard against cyber threats.
And externally, don’t be afraid to increase security measures. The good news is, the balance has tipped and there’s new positivity towards cyber-security with consumers and employees ready to embrace more security measures to stay safe online.
67% of consumers say security is more important than convenience
I’ve just scratched the surface of the findings here; I really recommend you take a look at the full report to find out how critical your CISO is to your cyber-security and your business.
