Gartner, a research and consulting organization, has emphasized the importance of prioritizing the human element in cybersecurity. While companies have typically focused on implementing new technologies and improving processes, Gartner warns that the most vulnerable aspect of an organization’s security is its employees.
To effectively improve cybersecurity, companies must revise their investment balance in technology and prioritize a security structure that is oriented towards people. “Focusing attention on people in the development and implementation of management funds, as well as through business communications and management of talents in the field of cybersecurity – will help improve decision-making about business risks, as well as prevent the outflow of significant personnel,” says Richard Adskott, Senior Director Analyst at Gartner.
Traditional programs that aim to increase security awareness have not been very effective in reducing the level of unsafe employee behavior. Instead, Gartner suggests prioritizing the experience of employees throughout the life management cycle of control tools.
The Director of Information Security (CISO) is responsible for protecting information located in the organization’s systems and applications, as well as ensuring compliance with data security requirements. Their responsibilities include analyzing security threats, developing security policies, leading the training process for employees in information security and more.
Effective cybersecurity requires a balance of investment in technology and a security structure that is oriented towards people. By prioritizing employees’ experiences throughout the management cycle, companies can better prevent cyber attacks and reduce the risk of personnel loss.