How important is your cybersecurity culture?

 Do you have a culture of cybersecurity in your business? When you send out a simulated phishing email, is there a buzz in your office? Are people competing against each other, trying to get the perfect score, and never clicking? Or are they rolling their eyes and complaining about having to take more cybersecurity training?

 

Did you know that humans are the most significant attack surface in your business? The bad guys are coming for your humans, too, not just your tech. Because your humans have a big target on their backs, you need to build a culture of cybersecurity within your business where everyone understands the vital role they play in staying safe from cyber attacks. Getting all of your humans engaged in cybersecurity is so important NIST even released a guidebook called "Cybersecurity is Everyone's Job."

 

The guidebook is worth a look. It breaks business functions into seven categories and addresses how each person can do their part to secure the business. It starts at the top with leadership, planning, and governance, which is crucial because it sets the business's tone and direction and establishes priorities. If your leadership isn't supporting and participating in building a cybersecurity culture, you're going to have a hard time getting the rest of the employees on board.

 

How important is cybersecurity in your culture? On a scale of one to ten, with one being not important and ten being the highest priority, what score would you give yourself? If you've given yourself a low score and you're not working on building your culture, the NIST guidebook can be a great place to start.

 

If you're interested in learning how to jump start your cybersecurity awareness program, register for my free masterclass, "Jump Start Your Cybersecurity Awareness Program." It's October 6 at Noon CT.