Cyber security: Security awareness can't be just a one off

Initiatives such as the US' National Cyber Security Awareness Month are all well and good, but day-to-day attitudes must change too

Creating an effective security culture is very different to a security project such as putting in a new firewall, intrusion detection, or data loss prevention software , which is often viewed as "deploy and forget". Security awareness is cumulative, with one set of measures building on others. And it has to be ongoing, because people come and go and the security threat continues to develop.

Roer compares cyber security to physical safety, an area where businesses have succeeded in reducing risks. Physical safety is, of course, more obvious than cyber safety.

"Cyber security is adding one level of abstraction," says Roer. "In physical safety we feel it straight away." But safety teams have achieved their results, not just by raising awareness, but also through measurements. "Safety measures behaviour and sets clear targets," he says. "They include the whole organisation, and use targets and activities to take them to that goal."

Awareness months, or even days, can add value Roer says. But to be most effective, organisations need to measure what they have learned, feed that back, and build on it. It's certainly not enough to formulate a security plan, then put it on the shelf until this time next year.

Stephen Pritchard is a contributing editor at IT Pro.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
iPhone 12 lineup official with A14 Bionic chip and 5G support
Mobile Phones

iPhone 12 lineup official with A14 Bionic chip and 5G support

13 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020