Security Awareness in a Connected World

Last week I “attended” a Cisco web event regarding their Connected World report. This event covered amongst other things Security Awareness.

You can download your own copies of the report(s) right here.

To many Security Awareness is an activity purely to ensure compliance to various standards.

However, when, in this report, 41% of respondents either do not have or, crucially, do not know if they have IT policies in place, it shows the potential impact to security of a lack of awareness.

A human being with a computer is always the weakest link in the chain, without proper awareness that chain could snap at any time. Meaning all technical security put in place could be rendered useless by the actions of, one well intentioned if ill informed employee.

To put it further into context, when approximately 3 out of 5 employees feel they do not need to be in an office to do what they do, then awareness is even more of a key activity.

Today’s environment is highly pressured with people needing to get the job done , generally in record time. What this report showed is that 40% of people who responded have broken policies to get the job done.

This is not just an awareness issue, Compliance standards and IT Policies, have to catch up to the rate of technology change. However, awareness should be a two way street with communication between the security professionals writing the policies and the user base.

This can then lead to questions about how best to work adhering to the policy, as well as to policy makers finding out new areas where said policies are lacking … read more

Copyright 2010 Respective Author at Infosec Island

Share article:
  • Facebook
  • LinkedIn
  • RSS
  • Twitter

One comment on “Security Awareness in a Connected World”

  1. News, analyses and comments on information leakage. Concentrating on causes and impact, mainstreaming human factors and awareness.

REPLY

You must login in order to reply.

Panel's Jotter

Editor Intelink says:(2012-10-02 10:49:19)

“Een kwaliteitsslag voor school, student en stagebedrijf” Het herkennen en correct behandelen van bedrijfsvertrouwelijke informatie. Het programma speelt tevens doeltreffend in op de sterk toenemende behoefte aan Social Media Integriteit van stag...

On: Stagevoorbereiding voor MBO en HBO: Bewustwording Bedrijfsgeheimen & Social Media Integriteit
Danny Lieberman says:(2011-05-09 13:35:04)

As one of the pioneers in DLP - data loss prevention and an active thought leader in the field since 2003 - it is typical for people who discover that the emperor is naked to take knee jerk reactions. IT and HR procedures are part of a set of data...

On: WikiLeaks legt menselijke factor bloot (EN)
Rachel McShelley says:(2011-03-31 10:01:15)

Blijft helaas onduidelijk waarom BitDefender dit opvallend en vooral ook een beveiligingsrisico vindt.

On: Facebook: 42% onbekende online vrienden
View all replies»

Join us on:

  • Facebook
  • LinkedIn
  • RSS
  • Twitter


Panels

Join our Research Panel!
Sign up for: Study into Information Leakage in the Netherlands 2010


Publications

News and analyses on Human Factors & Awareness


Upcoming events

No events