Silicon Prairie Cyber Services' Blog

Take a moment to geek out with me here at the beginning of this email. Before I get to layer 8, I have to talk about the OSI Model. The OSI Model is a model that describes the seven layers that computers use to communicate over networks. You start at the bottom at layer 1 with the physical stuff (think cables and wires). Then it ends at the top with layer 7 with all those awesome apps you use. As a cyber professional, you focus on securing all seven layers. But, did you know there's also a layer that's never pictured in the model? What is layer 8? Let's talk about it. Layer 8 is your humans.  Unfortunately, much like my last email, IT pros refer to humans negatively in layer 8. The IT Pros use layer 8 to focus on their human's lack of awareness and cybersecurity culture. If they lack awareness and culture, isn't that our fault as the cybersecurity pros? Instead of making fun of employees and complaining that they don't know anything, we need to step up and Commu...

  Three reasons people are like operating systems: People and operating systems both: Process Information Store Information Transfer Information Three reasons people are not like operating systems: Technology is predictable and always acts the same. People are not predictable, and their behavior can surprise you. People are adaptable. With that in mind, would you pick a person or an operating system as your last line of defense against a cyber attack? I would pick the human every time! It's adaptability for the win! You see, technology has to be programmed and told what to do, and even machine learning can only take you so far today. If that threat or phishing email is new or slightly different than what you're expecting, your tech might miss it. However, when you give people the proper training, they can figure out that something is phishy even if it's not the same as what you showed them in training. Humans are used to adapting because our world is constantly changing....

You've heard me say this before, and I'm saying it again… your cybersecurity awareness program needs to be built with purpose. When you build your program with purpose, your program will be different from mine, Bill's, and Sally's. BUT… There are some topics that every cybersecurity awareness program needs to address, and I've got 5 HOT TOPICS YOU NEED TO INCLUDE IN YOUR PROGRAM Building a culture of cybersecurity – it's YOUR responsibility Cybersecurity isn't just my responsibility. It' isn't everyone else's responsibility. It's YOUR responsibility. Each person in your business makes a difference, and everyone needs to be invested in creating and maintaining a secure environment, and it starts with culture. Humans are the key to defending your business Tell your humans that they matter to you and why they matter. Social engineering Tell your humans what social engineering is, why it's being used, and how it's being used against them ...

 Did you know I'm here to help you secure the humans in your business?   What does it mean to secure the humans? It's more than a catchy way of saying I do cybersecurity awareness training. To secure your humans, you need to give people the knowledge, training, and tools necessary to stay safe in a digital world. It's building habits that are substantial and lasting, not fleeting.   Why should we secure the humans? Humans are the last line of defense. Old school thinking was humans are our greatest weakness when it comes to cybersecurity. Today, humans are your best bet at preventing a cyber attack.   Why are humans so important? Technology is getting better all the time, so why should you focus on your humans? Because all the technology is getting better at preventing attacks, hackers are looking for ways to get around it. The easiest way to get around that technology is to go after people and have them do the attacker's evil bidding.   Ho...