Intelligent CISO Issue 28 | Page 15

latest intelligence awareness is found to be lacking among the UAE’s workforce. The Proofpoint survey revealed the common employee mistakes that increase an organisation’s risk of attack include poor password hygiene (29%), mishandling of sensitive information (25%), falling victim to phishing attacks (24%) and clicking on malicious links (20%). Cyber criminals are also constantly adapting their focus. For instance, while the global workforce has shifted largely to remote working, organisations worldwide have seen their attack surfaces widen and threat actors are all too aware of this. Remote working often means you aren’t protected by the same safeguards your office has in place; often adding additional hurdles and requiring extra vigilance when it comes to checking in with colleagues or partners to verify the authenticity of requests, and these conditions have breathed new life into the cyber threat landscape. “The best protection for this rise in remote working is a combination of technology and people,” advises Cosgrove. “It’s vital that businesses invest in modern email security solutions to detect and block as much of these threats as possible, removing the guess work from users.” We recommend that organisations prioritise a people-centric approach to security that protects all parties (their employees, customers and business partners) against these threats, including layered defences at the network edge, email gateway, in the cloud, and at the endpoint, along with strong user education. “A new approach is required. One that puts people at the heart of cyber defence – ensuring employees are not just able to spot and deter attacks but are acutely aware of their role in keeping our organisations safe,” added Cosgrove. u With growing number of attacks and a distributed workforce, how can organisations ensure that their data remains secure? www.intelligentciso.com | Issue 28 15