Evidence that awareness training works, CIRA looking for board nominees and another patching warning.
Welcome to Cyber Security Today. It’s Friday, June 4. I’m Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com.
Experts say that buying technology isn’t enough for companies to block successful cyber attacks. While anti-phishing email solutions help flag bad email messages, some get through. These have to be spotted and reported by staff. That’s why security awareness training of staff is also important. A report this week from Barracuda Networks backs this up. Researchers found organizations that regularly train their employees to recognize suspicious emails will see a 73 per cent improvement in the accuracy of employee reporting after only two training campaigns. Still, perhaps as many as three per cent of employees will click on a malicious link or attachment, which is why IT staff have to be ready.