How to foster a security culture

Click for: original source

Government IT teams can help make information security a shared responsibility through education and preparedness exercises and by leveraging technology. By Joel Snyder.

Engaging with the user in a non-confrontational and cooperative way is key. Rather than making it a “Big Brother is watching you” moment, when IT staff bring users into the event analysis and response, the incident becomes another successful piece of information security training. By gaining an understanding of how the user contracted the viruses, IT teams can adapt training programs and reconfigure security tools. In response, users will understand the real consequences of their actions and be more alert.

An agency’s workers play an essential role in its cybersecurity strategy. As frontline staff, they are perfectly positioned to notice anything unusual going on with IT systems. Government IT teams can take specific steps to foster a culture of information security through education and preparedness exercises and by leveraging technology.

This article then covers:

  • Have a broad-spectrum training program
  • Agencies should conduct preparedness exercises
  • Existing Technology Agencies Can Lean On

Changing user habits and awareness is critical, because the next time around, the desktop anti-malware might not catch the attack.

[Read More]

Tags infosec cio teams management