How should your employees understand computer security?

The number one threat to the security of your information system is an internal threat. Make sure your employees know how to use your computer safely. This is not done because you lack due diligence.

The minimum requirements that employees should know are as follows:

What type of information does your company handle?
from

What are the basic responsibilities of employees for information security?
from

What are the components of an organization password policy?
from

What security best practices should employees follow?
from

What is qualified as a clean work area to support safety?
from

What types of threats should employees be wary of?
from

What is a common attack method?
from

What actions should employees take when an attack occurs?
from

What is the company's email policy?
from

What is the company's social media and web surfing policy?

Your employees should understand how to process raw data to create information and how your business uses it to make important decisions and profits.

Wrong, the company lost.

The people who work for you and the third parties who come into contact with your system should be considered as a possible threat. This is why the information security program is being developed and everyone should be aware of this. Less is equivalent to letting your proverb "Pants are wrapped around your ankles."

Every employee is responsible for the security of computer security and digital assets. Those who acquire and process company data should be aware of all their responsibilities. The people who work for you need to understand and be responsible.

Everyone working in your organization should be security conscious and know what to do when trying or actually attacking. Less, your people will fail.

Everyone should know how to maintain a secure workspace and remove sensitive files from it. Workers should know how to lock their keyboards to prevent passersby from viewing the screen and accessing the terminal.

Everyone in the company should know how to create and maintain robust passwords or multi-factor authentication. Passwords should be complex and subject to regular changes. Digital security plans across the organization should be maintained and regularly evaluated.
from

Security-related policies should be consistent with business and industry best practices. They must participate in each employee's safety awareness training. For example, the person working for you should be aware that the storage media outside the office must be properly scanned before being introduced into your information system.

Your employees should be aware of the common attacks used by cybercriminals and others. A seemingly innocent request for information over the phone may be the beginning of a social engineering attack aimed at gaining critical information to invade the company's systems.

Email needs to be part of the organization's policy to protect sensitive information. Once again, policy development should be part of the organization's due diligence to prevent cybercriminals from entering your system. Your employees must know how to deal with the various situations that arise. Simply click on a malicious link to compromise the entire system.

Using social media platforms and surfing the Internet can open up multiple ways for malicious users to enter your system. When using Internet resources, your employees need to understand what is considered acceptable. For example, if an employee writes information that devalues ​​a certain ethnic group, or your assets may even be used for illegal purposes without your knowledge, your company may be held accountable.

Keeping the confidentiality, integrity and availability of your company's mission-critical information requires that the people working for your company have the tools to do so. Forming a formal information security plan is a basic necessity. You are in trouble. If you have no plans, you have lost the battle against cybercriminals. If you have a plan and your employees don't realize it - the same thing.

You must start to see computer security as a business process.

---

Orignal From: How should your employees understand computer security?