Six Updates Companies Need to Make to Modernize Their Cybersecurity

Six Updates Companies Need to Make to Modernize Their Cybersecurity

Six things you can do to be proactive against potential cyber crimes.

  • By Kayla Matthews
  • Apr 17, 2019

Having an up-to-date cybersecurity plan is crucial for enterprises that want to stay as protected as possible from the latest threats in the online realm. Here are six things you can do to be proactive against potential issues.

1. Make Employees' Cybersecurity Training Ongoing

In the case of many kinds of workplace training, people learn about the topic once a year at most. Then, they quickly forget the learned material after the training event and have few or no opportunities to apply it in real life. When that happens with cybersecurity, employees are not adequately equipped to play their roles in helping safeguard against threats.

A study of businesses in the United Kingdom found that only 46 percent of polled organizations provided cybersecurity awareness training beyond new hire onboarding or annual refresher courses. If employees receive regular updates about cybersecurity issues affecting the company, they'll know how to spot risks and not fall for things like phishing attempts.

2. Incorporate More Frequent Board-Level Cybersecurity Discussions

Ideally, a cybersecurity plan must take a top-down approach where the people at the highest levels of a company, as well as the board of directors, are aware of the most pressing threats and their mitigation efforts. However, most of the time, that doesn't happen.

Research from McKinsey showed that only a quarter of companies present cybersecurity matters to the board of directors more than once a year. Moreover, up to 35 percent of companies only give that information to the board on request. Any cybersecurity plan should implement regular cybersecurity discussions with the board, such as every month.

If a company has cybersecurity-related checks they make on a daily, weekly and monthly basis, representatives from that organization should add board discussions to the monthly checklist.

Board members don't need to become cybersecurity experts. But they must know what's happening from a cybersecurity standpoint and how potential attacks could negatively impact the organization. Then, they can make smart decisions about the company's future competitiveness in the marketplace and avoid pitfalls.

3. Set Security Policies That Relate to the Information Each Employee Needs

Many companies are far too lenient when it comes to employee access to sensitive documents. Sometimes they don't have any access-related security policies in place at all, which increases the risk of information mismanagement and the potential breach of client confidentiality.

The 2018 Data Risk Report from Varonis revealed that 88 percent of companies with at least 1 million folders of data had more than 100,000 of them open to everyone. Additionally, in 21 percent of cases, all employees had access to every folder owned by the company.

On the other end of the spectrum, an employee could quickly get frustrated if they regularly need to access documents requiring login information they don't have. A company should update its cybersecurity plan by using a security policy manager to establish, adjust or remove individual security policies for the documents that employees use.

This approach works well when a company scales up and may need to let remote teams access certain folders to do their work off-site, for example. Companies may decide that the easiest thing to do is let most employees have access to most or all files, which is not a smart move when it comes to cybersecurity.

4. Download Operating System Updates on All Applicable Devices

When creating or updating their cybersecurity plans, many companies examine their networks but don't pay enough attention to the devices connected to them. Doing a device-level assessment of risks is especially essential, since many people bring their own devices to work or use personal devices outside of work hours to access sensitive files from home.

A market share report spanning from April 2018 to March 2019 showed that Windows 7 still edged out Windows 10 for the top operating system. However, outdated operating systems increase the overall vulnerability to threats. The situation is even worse if people don't install security patches associated with known issues on those older operating systems.

A substantial part of a company's cybersecurity plan should encompass updating all the operating systems on company computers — including personal devices that people bring from home. Otherwise, a company could be more prone to threats than it seems on the surface.

5. Make an Incident Response Plan That's Specific to Your Organization

It's not sufficient for companies to come up with a cookie-cutter approach to responding to cybersecurity problems. A team of researchers recently worked on creating a better incident response framework for cybersecurity incidents. They looked at weaknesses within organizations and discovered that one of the common flaws was that companies created generic response plans.

The researchers caution that it's preferable to plan for incidents in ways that are specific to the company. That includes having a clear, actionable list of steps to take after an incident. Furthermore, all people in the organization must have access to that plan and know how to act on it — not just the IT department or cybersecurity team.

6. Prioritize Cybersecurity Hiring or Upskilling

There is a global cybersecurity skills gap of nearly 3 million positions. This issue makes it incredibly difficult for companies to find enough cybersecurity talent. However, you should still emphasize talent management as part of your updated cybersecurity process.

If a look at your previous cybersecurity plan shows you don't have enough staff members to keep up with demand, consider upskilling people in other IT roles by signing them up for cybersecurity boot camps or online certificate courses.

Having a relevant and current cybersecurity plan is one necessity, of course. But the cybersecurity professionals responsible for carrying it out also need to thoroughly understand the most likely threats a company may experience. That can't happen if you treat cybersecurity as an afterthought.

Updated Plans Increase Protection

These items show that numerous factors can render your IT plan outdated. Fortunately, it's easy to fix them and make smarter decisions moving forward. Doing that helps organizations avoid costly cybersecurity issues.

Featured

  • From Surveillance to Intelligence

    Years ago, it would have been significantly more expensive to run an analytic like that — requiring a custom-built solution with burdensome infrastructure demands — but modern edge devices have made it accessible to everyone. It also saves time, which is a critical factor if a missing child is involved. Video compression technology has played a critical role as well. Over the years, significant advancements have been made in video coding standards — including H.263, MPEG formats, and H.264—alongside compression optimization technologies developed by IP video manufacturers to improve efficiency without sacrificing quality. The open-source AV1 codec developed by the Alliance for Open Media—a consortium including Google, Netflix, Microsoft, Amazon and others — is already the preferred decoder for cloud-based applications, and is quickly becoming the standard for video compression of all types. Read Now

  • Cost: Reactive vs. Proactive Security

    Security breaches often happen despite the availability of tools to prevent them. To combat this problem, the industry is shifting from reactive correction to proactive protection. This article will examine why so many security leaders have realized they must “lead before the breach” – not after. Read Now

  • Achieving Clear Audio

    In today’s ever-changing world of security and risk management, effective communication via an intercom and door entry communication system is a critical communication tool to keep a facility’s staff, visitors and vendors safe. Read Now

  • Beyond Apps: Access Control for Today’s Residents

    The modern resident lives in an app-saturated world. From banking to grocery delivery, fitness tracking to ridesharing, nearly every service demands another download. But when it comes to accessing the place you live, most people do not want to clutter their phone with yet another app, especially if its only purpose is to open a door. Read Now

  • Survey: 48 Percent of Worshippers Feel Less Safe Attending In-Person Services

    Almost half (48%) of those who attend religious services say they feel less safe attending in-person due to rising acts of violence at places of worship. In fact, 39% report these safety concerns have led them to change how often they attend in-person services, according to new research from Verkada conducted online by The Harris Poll among 1,123 U.S. adults who attend a religious service or event at least once a month. Read Now

Most   Popular

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.