How Can Businesses Close 'The Cybersecurity Gap'?

[DEAD7]

The trickle of security students emerging from post-secondary schools may not be fully prepared to tackle complicated security issues -- what we need are people who can protect businesses environments from everything from spam and BYOD vulnerabilities to complex threats like APTs and spear phishing. Second, certain companies may not know what to look for in a professional. Third, when skilled professionals are hired, they can often be overworked to the point where they don't have the time to keep up with the latest developments in the field -- and even in their own security tools... The fundamental problem facing the skills gap, however, is that there aren't enough people coming into the field to begin with. Here, companies need to do two things: step-up their advocacy when it comes to promoting cybersecurity careers, and look internally for employees who have the skills and desire to take on a security position but need the training and support to succeed...

Finally, businesses need to recognize that security threats today go well beyond just one department. Every employee should be responsible for knowing what to look for in an attack, how to report a suspected threat, and how they can simply disengage from content and files they deem suspicious. Basic security training needs to become a part of the onboarding process for any employee -- especially for those in the C-Suite, where a greater number of spear-phishing attacks occur.

Digital organizations face a huge cybersecurity skills gap

 

[无名的]

I saw a lot of scarily lax security at all sorts of buildings when I worked in energy management. So many places are almost completely devoid of security for building automation systems.

That's the tip of the iceberg though.... eventually a non state actor will figure out how to bring down a plane as a guided missile without ever worrying about TSA or crippling the electrical grid.

 

[---]

An honest assessment is it can't be covered the cost amounts are staggering. Remember reading a report by JP Morgan at their cost amounts to have what they thought was a, compliance cyber security team in place. Staggering amounts and they still got hacked!