YJT1 - Application of Effective Comm (UG 0914) Task 2: Presentation Kody M. Hackbusch

Imagine for a moment…

“Only 1 in 10 people who regularly use a computer or other digital device to connect to the Internet have received any kind of cyber security training in the last 12 months, and more than two thirds have never had any such training.” (Cobb, 2012) “Only 20% of IT security professionals are confident their organizations have made adequate investments in educating users on how to avoid phishing attacks.” (Shephard, 2015)

Data shows that despite the ever growing adoption of interconnected and mobile technologies in business there is a lack of cyber-threat awareness among users. This indicates the need for executives and managers to have a high level understanding of the current digital landscape so they can evaluate current infrastructure and readiness.

 What does awareness mean?  What are some of the common threats?  Cost/Benefit Analysis Overview

 Awareness is understanding what to look for, common pitfalls and how our actions can affect the organization as a whole.  Awareness is about being mindful and respectful of how we interact with the technology that provides us with the productivity enhancements that we all appreciate and have come to rely upon.  Awareness is about responsibility from the executive level down to the temp worker. Awareness

 Spear Phishing  Whaling  Crypto Ransoming  Rogue Insiders  Social Media  BYOD Threats

 Loss of productivity  Breach goes undetected  Loss of future revenue  Affects interconnected partner systems  Intellectual Property  Sensitive/confidential data Costs of cyber attack Cost/Benefit Analysis lists derived from (Brink, 2014) (K Rudolph, 2015)

 Be seen as a leader  Reduced threat of incidents  Decreased down-time  Protection of assets, more confidence  Improved compliance  Improved morale  Protection against users Benefits of training Cost/Benefit Analysis lists derived from (Brink, 2014) (K Rudolph, 2015)

Recap Data shows that despite the ever growing adoption of interconnected and mobile technologies in business there is a lack of cyber-threat awareness among users. This indicates the need for executives and managers to have a high level understanding of the current digital landscape so they can evaluate current infrastructure and readiness.

Recap  What does awareness mean?  What are some of the common threats?  Cost/Benefit Analysis

PWC 2015 US CEO Survey

Understanding that one of the largest security weaknesses in businesses today is user actions should prompt you to take a closer look at how your organization handles not just the technology you employ but those who use it. Conclusion

References Brink, D. E. (2014, November). The last mile in IT security: changing user behaviors. (Aberdeen Group) Retrieved from Changing-User-Behaviors.asp Changing-User-Behaviors.asphttp://v1.aberdeen.com/launch/report/research_report/9910-RR- Changing-User-Behaviors.asp Burg, D. (2015). Concern over cyber threats has CEOs warming. (Pricewaterhouse Coopers LLP) Retrieved from PWC 2015 US CEO Survey: Cobb, S. (2012, October 10). Study finds 90 percent have no recent cybersecurity training. (ESET Anti- Virus) Retrieved from percent-have-no-recent-cybersecurity-training/ 90-percent-have-no-recent-cybersecurity-training/ 90-percent-have-no-recent-cybersecurity-training/ K Rudolph. (2015). Benefits of an Information Security Awareness Program. Retrieved from Native Intelligence Inc: Shephard, D. (2015, March 16). 84 Fascinating & Scary IT Security Statistics. Retrieved from statistics/ statistics/ statistics/