Watch Don’t Get Hacked! How to Build a Security Awareness Program for Your Agency Online | Vimeo On Demand

82% of cybersecurity breaches have a human element to it. Regardless of the firewall and cybersecurity technology implemented, if the workforce is not trained in spotting suspicious attempts, these measures will never be sufficient to safeguard any organization from any form of cyber-attacks. Cybercriminals have truly malicious if not downright destructive missions going as far as targeting critical facilities to access valuable data and disrupt organizations and even nations.  James Emerson and TJ Nicholls lead this session to discuss the risks and threats of cyberattacks and effective means to prevent these from happening within your facility. James is the Vice President at the National White Collar Crime Center (NW3C) and has 43 years of law enforcement experience focusing on cybercrime and computer forensics. Meanwhile, TJ is the Information Security Services Manager at Nlets who has 7 years of security experience, specifically in the public safety industry.  Specifics of their discussion include:  The value in appreciating the risk to understand the threat of cyberattacks. A rundown of the massive infrastructures that are critical to our everyday lives at risk to cyberattacks. A glimpse into the threat landscape looking at: The top countries and sectors that fell victim to cryptographic attacks. The common methods of attack, the targets, and the goal behind the attacks. Common vulnerability exposures that demonstrate how the attacks permeate systems and networks. State-sponsored cyber threats and activities and the different critical infrastructure and industries that they’ve targeted and attacked. Considerations when prioritizing risks such as shut down of services and utilities we depend on daily, monetary costs in cases of ransomware, and access to confidential and critical data. The common risk exposures, the goals of cybercriminals in their actions, and the attack outcomes. Solutions to these threats that address the human element to it through security education programs. A step-by-step look into a security education program’s implementation from testing, user onboarding and group segmentation, and identifying potential targets. The components of the program’s day-to-day executions to ensure its effectiveness. Training modules that are provided with different formats, recipient groups, lengths, and frequencies to ensure a comprehensive understanding of cybersecurity concepts. Social engineering campaigns and exercises to gauge the employees’ understanding of concepts covered in training. Auxiliary education/training that takes into account people’s different learning styles to ensure thorough comprehension and integration of lessons. Quarterly themes that focus on trending threats or identified weaknesses of employees on the security front to further augment their awareness. Creating a security culture where people are constantly reminded of the need for cybersecurity, conversation around it is encouraged, and efforts and awareness to uphold it are incentivized. Monitoring metrics and capturing data that provides insights into the program’s effectiveness. The importance of making the program repeatable and scalable and steps do make it as such.

Video marketing

Event marketing

Employee communication

Video monetization

Don’t Get Hacked! How to Build a Security Awareness Program for Your Agency