Don’t blame the IT people

[ad_1]

Cyber ​​security is everyone’s business, says CERT NZ. Photo / Supplied.

Business leaders need to take action on cybersecurity, says leading agency CERT NZ.

Too many organizations see cyber attacks as just a “computer problem,” according to a cybersecurity expert.

This is despite recent high-profile attacks and the fact that CERT NZ figures show cybersecurity incidents caused nearly $ 17 million in direct financial losses in New Zealand last year alone, said Michael Wallmannsberger, consultant. in cybersecurity and former Chief Information Security Officer (CISO) at Air New Zealand. .

Everyone always looks at the IT team whenever there is a problem, he says, but all business leaders have a role to play in cybersecurity: “Before an incident, no one wants to listen to the CISO . After the incident, everyone becomes RSSI.

“A lot of times the conversation about security issues turns to who’s pissed off, but figuring out who to blame for these systemic issues doesn’t help respond to them more effectively. We need to start seeing cybersecurity as a capability rather than just a deliverable.

“This change in attitude is really important because the reality is that the cybersecurity problem has been around for a long time and will only get tougher over time.”

Michael Wallmannsberger, former Chief Information Security Officer (CISO) at Air New Zealand. Photo / Supplied.

Wallmannsberger says there are three areas organizations can work on to help improve their defenses and engage the rest of their staff more effectively:

Make it everyone’s business by managing cybersecurity threats and responses through a cross-functional group. Give security managers the access and influence they need to be effective. Reframe the problem with your people by talking less about security and more of the current trust enjoyed with customers and stakeholders and the resiliency of the systems behind the products and services you provide.

CERT NZ Director Rob Pope says expert, easy-to-follow advice is available for free, regardless of the size or shape of an organization.

Rob Pope, Director of CERT NZ. Photo / Supplied.

“There is a wide range of incidents that can and do happen, but we understand that not all organizations or businesses have enough dedicated resources to tackle cybersecurity.

“CERT NZ is one of the many agencies that have the know-how to help people. Whether it’s technical advice for IT specialists, tips and alerts for business owners, or the latest common threats for individuals, help is right at your fingertips.

“We have a ‘no-door’ approach, which means that if there is someone better suited to help you, we will point you in their direction.

“The results of cybersecurity attacks are varied and can include loss of revenue, assets or customers, says Pope,” so it’s time for organizations to start broadening their view of accountability and seeing cybersecurity as more that a simple computer problem is a problem. business problem.

[ad_2]