{"id":31754,"date":"2018-04-30T11:32:11","date_gmt":"2018-04-30T03:32:11","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=31754"},"modified":"2018-04-30T11:32:32","modified_gmt":"2018-04-30T03:32:32","slug":"human-error-is-leading-cause-of-cybersecurity-breaches-study","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2018\/04\/30\/human-error-is-leading-cause-of-cybersecurity-breaches-study\/","title":{"rendered":"Human error is leading cause of cybersecurity breaches \u2014 study"},"content":{"rendered":"

A new worldwide study cited by DDoS Mitigation service provider IPC reveal that a lack of skills among employees is a critical barrier holding enterprises back from implementing threat management more effectively.<\/span><\/strong><\/p>\n

\"\"<\/a>

IMAGE FROM PIXABAY.COM<\/p><\/div>\n

Conducted by the CyberEdge Group and IPC\u2019s cybersecurity services partner Imperva Incapsula, the\u00a0<\/a>2018 Cyberthreat Defense Report’s<\/a>\u00a01,200 respondents showed that lack of skilled personnel and low security awareness among workers are the top two barriers that inhibit companies from adequately defending themselves from cyber-attacks.<\/span><\/p>\n

The study was conducted in organizations with more than 500 employees in countries across North America, Europe, the Middle East, Latin America, Africa, and Asia-Pacific (APAC). Some key findings in the APAC region include organizations in China and Japan leading all respondents in believing that they will be compromised by a successful cyber-attack this year, Chinese companies being the world\u2019s leading victim of ransomware, and the position of IT security architect\/engineer being the hardest to fill in Japan, China, and Singapore.<\/span>\u00a0<\/span><\/p>\n

\u201cThreats are constantly evolving and the chances of being attacked are increasing significantly as enterprises everywhere integrate new web-facing technology into their day-to-day systems. New types of attack methods are always emerging, and a single employee oversight can make or break a company. This study reveals how it is imperative to keep pace with the threat landscape as it evolves and continue educating ourselves on the latest attack methods,\u201d said\u00a0Ni\u00f1o Valmonte, IPC\u2019s director for marketing and digital innovation.<\/span>\u00a0<\/span><\/p>\n

Human error, negligence as top risk<\/span><\/b><\/h2>\n

The revelation that the lack of employee skills is a main inhibitor to effective cybersecurity is in line with the study\u2019s other findings. When asked on what type of attack companies are most concerned with, the respondents\u2019 answers revealed that the top three are Malware, Ransomware, and Phishing \u2014 threats that commonly enter a computer through the negligent actions of the user.<\/span><\/p>\n

These three attacks are often spread through spam emails that contain malicious attachments. Opening the email will end up installing the threat into a computer. What\u2019s more devastating about this is that once installed, most of them are programmed to automatically send themselves to the mailing list of an infected computer, thereby spreading itself further. Other common sources of the top three cyber threats are malicious files hidden inside downloaded files and software, and through a method called drive-by downloading, which occurs when malicious programs are automatically downloaded by visiting an infected website.<\/span><\/p>\n

\u201cCybercriminals often use trickery to get people to unknowingly download malicious files. This can be an email with a file attached that tells you it is a receipt for a delivery, a new tool for a web browser, or even a bogus antivirus program that has malware hidden inside. These are just a few examples of how attackers can infiltrate a network that every company and its employees must know about,\u201d said Valmonte.<\/span>\u00a0<\/span><\/p>\n

Making cybersecurity education a priority<\/span><\/b><\/h2>\n

In order to avoid these threats, IPC recommends that businesses conduct constant training in order to instill the right skills, awareness, and the \u201ccybersecurity culture\u201d required in workers to fight against new and evolving threats.<\/span><\/p>\n

\u201cCybersecurity education needs to be an integral part of the workplace culture, it doesn\u2019t mean hosting a one-time course or seminar, it means making security a collaborative, continuous cultural initiative that will take up a lot of time but is a good investment in the long run with the fate of a company at stake.\u201d, Valmonte added.<\/span><\/p>\n

According to IPC, organizations must first ensure that cyber security awareness and organizational security procedures are well established not only through periodic vulnerability assessment of their network and critical systems, but also in the mind-shaping of employees\u2019 right from the induction and training process. In line with this, Valmonte recommends executives and middle managers to foster a culture of workplace security by talking to their respective teams about the following as a start:<\/span><\/p>\n

    \n
  • Practices in keeping a computer clean, including sensibly limiting the programs, apps, and data that can be downloaded and installed, and speaking up whenever a computer exhibits strange behavior;<\/span><\/li>\n
  • Using long, strong passwords that has the combination of uppercase letters, lowercase letters, symbols, numbers, and changing them routinely;<\/span><\/li>\n
  • Recognizing and deleting email messages with suspicious subject lines and links;<\/span><\/li>\n
  • Constant and consistent backup of files and\/or applications;<\/span><\/li>\n<\/ul>\n

    \u201cBy starting with these steps, a company can already drastically reduce the installation of malicious programs within their network,\u201d said Valmonte.<\/span><\/p>\n

    \u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    A new worldwide study cited by leading DDoS Mitigation service provider IPC reveal that a lack of skills among employees is a critical barrier holding enterprises back from implementing threat management more effectively.<\/p>\n","protected":false},"author":6,"featured_media":30737,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[763,54,96],"class_list":["post-31754","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-ipc","tag-security","tag-technology"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/31754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=31754"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/31754\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/30737"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=31754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=31754"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=31754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}