was thatguy
living in a cage of fear
- Joined
- Apr 28, 2008
- Messages
- 53,300
- Reaction score
- 102,078
First off…it’s “their”…just warning you the teacher is going to scold you.
Downloading a social app onto a company owned device is a clear violation of policy in most companies.
How is that IT’s fault?
(Our computers don’t allow downloads so we can’t do it if we wanted to, so our IT does have that capability.)
When we get any email from outside our network a big giant warning tells us it’s from an external source.
That doesn’t automatically make it bad, we have legit vendors, trucking, payroll company etc that email all the time from outside our happy little network.
But the most common intrusion into company data/ emails/ etc is an internal non malicious action by an employee.
Someone does something stupid or simply without paying attention and BAM…the hacker is in.
Whether the employee knows it or not.
The only way to combat this fully is training training training.
I’m sure you know all this as well.
We are a drilling solutions company. I work weeks at a time on a drilling rig location.
All of our revenue is generated from field work.
Over the years our annual and monthly training was always safety. Safety Safety Safety.
Now, field safety, performance, etc do not hold a candle to potential cyber attack costs.
It is easily the biggest cost threat to any company of this size. Before I hired on they had experienced a ransomware attack demanding tens of millions of dollars.
They did not pay and it took months to recover what data they could. It cost millions in revenue and took years to fully recover as far as client trust and insurance premiums.
Employee training is paramount to internet security.
Our IT security department is bigger now than even the legal department. And we’re just a drilling company.
Granted, our parent company has revenue in the hundreds of millions, but still if a drilling company faces these kinds of threats I can’t even imagine what an internet based business faces.
So like Nordie said, a first time failure to see a trick email from IT results in an immediate onslaught of training above and beyond our WEEKLY micro training program.
Another failure and you’re heading to corporate in Texas for in-house training.
After that you’re gone. There’s simply too much at risk.
