Catch Data Breaches Before the News Crews: Involve Your End Users

Great article on the need for organizations to capture and control data breaches before they become headline news

Great article in Sandhill.com on the need for organizations to capture and control data breaches before they become headline news. Too often, a data breach hits the news after a third-party investigation (64% of recent breaches, in fact!). The investigators usually release the news in a way that informs both the public and the affected organization at the same time– too late for the subject of a viral story to take action.
Gartner’s Andrew Walls points out that the “The development of effective security intelligence and control depends on the ability to capture and analyze user actions that take place inside and outside of the enterprise IT environment.” Analyzing user actions is one thing, being confident that there’s a culture of security-conscious behavior is quite another. Also, beyond the monitoring controls that IT puts in place, some of the best early reports on potential breaches come from informed employees who are alert to the signs of potential attack. Users must be part of an organization’s first line of defense; training and reinforcement produce effective behavior changes to empower end users/employees.
Involving all employees in the early breach detection of potential issues via effective security awareness training and consistent reinforcement is the most critical step towards improving your chances of staying out of the (bad) news.

Share this Post