{"id":2183,"date":"2017-06-09T09:24:22","date_gmt":"2017-06-09T14:24:22","guid":{"rendered":"https:\/\/www.stratospherenetworks.com\/blog\/?p=2183"},"modified":"2018-06-26T12:03:52","modified_gmt":"2018-06-26T17:03:52","slug":"5-simple-steps-build-business-security-awareness","status":"publish","type":"post","link":"https:\/\/www.stratospherenetworks.com\/blog\/5-simple-steps-build-business-security-awareness\/","title":{"rendered":"5 Simple Steps to Build Business IT Security Awareness"},"content":{"rendered":"

\"\"<\/a>IT security has already become a major concern for businesses around the world and across all industries in recent years. Headlines detailing data breaches have become common, and it\u2019s clear that no company can afford to ignore the potentially devastating consequences (financial and otherwise) of suffering a cyberattack.<\/p>\n

The WannaCry ransomware incident last month reminded us all of the importance of staying on top of IT security. The malicious software caused tens of thousands of infections around the world, affecting more than 150 countries, according to the United States Computer Emergency Readiness Team<\/a>.<\/p>\n

Ransomware \u2013 one of the biggest cybersecurity threats businesses have faced in recent years \u2013 is a type of malware that cyber criminals use to encrypt a victim\u2019s files. They will then demand payment in exchange for the decryption key. WannaCry reportedly requested a ransom of approximately $300 U.S., according to US-CERT.<\/p>\n

Cybersecurity threats like ransomware can devastate businesses by cutting off access to crucial data, causing downtime and making it impossible for employees to do their jobs. In addition to the potentially high cost per hour of unplanned downtime, a data breach can damage a company\u2019s reputation and lead to regulatory consequences if the organization handles sensitive data (e.g., financial information).<\/p>\n

The role of human error in cyberattacks
\n<\/strong>Cyber criminals frequently try to trick end users into granting them access to sensitive data using tactics like phishing<\/a> \u2013 sending emails that imitate legitimate business communications. A 2016 Malwarebytes report on ransomware<\/a> found that 46% of ransomware attacks worldwide resulted from emails<\/a>, typically through malicious attachments or links.<\/p>\n

Whether they fail to use strong passwords, click on malicious links in emails, or visit shady websites that harbor malware, end users can inadvertently open the door for hackers and end up causing a costly data breach. That\u2019s why any comprehensive and proactive IT security strategy should include employee awareness training.<\/p>\n

What can you do to reduce your risk of a data breach?<\/strong>
\nEmpowering your end users to make the right choices when leveraging different types of technology will lower your risk of data breaches, downtime, and potentially catastrophic business losses. Here are a few steps to get you started:<\/p>\n

1. Identify current awareness practices for new staff members and recurring awareness programs performed by IT or HR.<\/strong> Because hackers keep developing new malware and finding novel ways of gaining access to sensitive data, it\u2019s important to make awareness training an ongoing project to keep up with the constantly evolving IT security threat landscape.<\/p>\n

2. Identify standard IT practices, policies and standards. <\/strong>If you haven\u2019t already, it\u2019s important to create and enforce IT security policies<\/a> to protect your business. These can include the following:<\/p>\n