Mainebiz

W W W. M A I N E B I Z . B I Z 21 F E B R UA R Y 1 8 , 2 0 1 9 F O C U S WO R K P L A C E T E C H N O L O G Y B Y A N D R E W R I N A L D I H OW TO I n today's world, cybersecurity is a hot- button issue that effects organizations large and small. A cyberattack can be extremely damaging, and companies have to deal with bad PR and mistrust of customers, compromise of sensi- tive company or personal information, monetary theft and potentially weeks of downtime and remediation. Any employee can be the target of a cyberattack that can affect an entire organization. While IT will be a critical resource and may even champion cyber- security for your business, it isn't practi- cal to rely on one person or department to manage your cybersecurity program. Each department, from finance to HR to IT, comes with its own set of threats and challenges. e key to tackling these challenges and threats is to build an educated, informed cyber-smart team that has the background, training and tools they need to be effective cyber-defenders. 1. Create the culture Make cybersecurity a company priority, and make sure everyone in your orga- nization knows from Day One that it is a concern. Introduce your orga- nization's cybersecurity policy to new employees — from the executive team to the intern — discuss it and prac- tice it every day. Show each employee how important their participation is by explaining the specific threats they may face in their role, and by giving them clear and actionable steps they can take to do their part. By making cybersecu- rity a consistent part of everyone's job, and even part of your job descriptions, you'll be in a much better position to protect against the growing number of cybersecurity threats that could com- promise your business. 2. Educate continuously Providing one-time employee aware- ness training is a great start, but it really only gets the conversation started. In order to instill good cyber- hygiene in your entire team and keep the topic fresh, it is vital to educate employees regularly with a variety of content. Ongoing training sessions in video format give a regular reminder and teach employees something new each time. Make the training engag- ing. By tailoring the training to tackle specific threats within each department you will empower your employees to participate in identifying and stopping cyberthreats before they are an issue. You can also consider offering prizes or recognition to employees who engage with training sessions. Outside of official and scheduled training sessions, you can employ a vari- ety of mediums to enforce the concepts: Create eye-catching cybersecurity posters that can hang in your offices. Send out quick tips or cybersecurity anecdotes to get everyone thinking. Keep employees updated on the latest threats and how spot them. Each person learns differently, and using a variety of training mediums can help with engagement and infor- mation retention. 3. Test and refresh To ensure that the cybersecurity tech- nology and education that is in place is working, you'll need to test and monitor employee awareness. Send simulated phishing emails to determine whether employees are clicking bad links or opening files they shouldn't. For employ- ees who are fooled by the phishing test, offer training. Once you have the lay of the land you can ensure employees are improving their response and decide if additional training or technology is necessary. It's a win for employees and the company as cybersecurity posture continuously improves over time. Promoting, educating and living cybersecurity brings your team from a potential liability to an army of cyber- defenders. An educated team is a strong team, one that can protect your business each and every day. In the end, develop- ing the right mindset and culture can make all the difference in the world when it comes to cybersecurity. Andre w Rinaldi is the co- founder (with Rob Simopoulos) of Portland-based De fendify, a n a l l - i n - o n e c y b e r s e c u r i t y platform for small business. He can be reached at arinaldi @ defendify.io Build a culture of cyber-defenders Developing the right mindset and culture can make all the difference when it comes to cybersecurity. JOIN US FOR THE 2019 MAINE MANUFACTURING SUMMIT The event will bring together approximately 200 companies from across all manufacturing sectors and their respective trade associations to discuss industry trends, issues, and growth opportunities for the future. FOR MORE INFO AND TO REGISTER, VISIT W W W.MAINEMFG.COM/E VENTS FRIDAY, MAY 17 7: 3 0 A M – 1 2 : 0 0 P M / L O S T V A L L E Y S K I A R E A , A U B U R N Presented by: Media Sponsor: Sponsored by:

• Cover