{"id":11337,"date":"2018-02-01T11:00:11","date_gmt":"2018-02-01T19:00:11","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/02\/01\/news-5108\/"},"modified":"2018-02-01T11:00:11","modified_gmt":"2018-02-01T19:00:11","slug":"news-5108","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/02\/01\/news-5108\/","title":{"rendered":"Making Workers a Strong Security Asset"},"content":{"rendered":"

Credit to Author: Jay Abdallah| Date: Thu, 01 Feb 2018 13:00:19 +0000<\/strong><\/p>\n

\"\" <\/p>\n

People play the most important role in security, there is no doubt, but here are some ways to keep people informed and be a strong part of a company\u2019s security plan.<\/u><\/strong><\/p>\n

There is one day every parent keeps an eye on and that is the day their son or daughter gets behind the wheel for the first time. He or she has the idea of once I get on the street, \u201cI am going to be the only one there and everything is going to be fine.\u201d What they don\u2019t realize, however, is there are drivers out there that unintentionally make mistakes or others speeding and operating with reckless behavior showing malicious intent.<\/p>\n

Along those lines, for a safe driving environment — and to step up the metaphor \u2013 or for a secure manufacturing automation<\/a> environment, it becomes vital to educate people so they understand where the threats come from.<\/p>\n

The most important element is awareness and education and ensuring that education is recurring and constant. It must come down from the absolute top levels of management and filter down through operations leadership into human resources and eventually down to the workers themselves.<\/p>\n

That only makes sense because an EY\u00a0(formerly\u00a0Ernst & Young) report<\/a> that came out in November found attacks carried out by unsophisticated, individual attackers successfully exploited vulnerabilities organizations were aware of, but did not ward off. The report also showed careless or unaware employees are seen as the most significant increasing vulnerability to organizations\u2019 security, with 60 percent of respondents saying it was a problem, compared to 55 percent the previous year.<\/p>\n

Having that recurrent, consistent reminder of general awareness, understanding what password polices mean, understanding what BYOD (bring your own device) policies mean, understanding how appropriate use methodology works and why it is there, what is the difference between a phishing attack and a standard email attack. We want to make sure they have the education, the awareness, the wherewithal to understand and detect when, where and what they should be looking for in these types of situations and how they can remain protected along with the company.<\/p>\n

Industrial cybersecurity<\/a> awareness is increasing and the connection that needs to be made where an operator may have in the past focused on physical equipment failure now needs to be aware a cyber incident could cause the same problem.<\/p>\n

\u201cGetting people to realize the world is a different place and you do play a role; that is why we have policies and procedures,\u201d said Joshua Carlson, Subject Matter Expert and Technical Sales Leader for Cybersecurity at Schneider Electric. \u201cIt is all about driving the idea of a cybersecurity culture and getting everyone on the same page to realize what is my role and my part of the big scheme in helping the company be successful. You don\u2019t want to be responsible for the exposure or the increase in risk or the delivery of malicious software or the inadvertent exposure of customer data.\u201d<\/p>\n

Even to this day, users think of security purely as a technology issue. \u201cLet\u2019s just buy this device and our worries are gone,\u201d they will say. That is where the idea of people, process and technology truly comes into play. That is also where fixing the weakest link in that chain, people, is imperative. With the proper education and training, people can become the strongest asset.<\/p>\n

The following are tips and best practices to help workers become more aware of the importance of security and how they need to participate:<\/p>\n