Intelligent CISO Issue 79 | Page 69

BUSINESS surveillance

There is no one size fits all approach to security awareness – organisations need to be creative and tailor messaging based on unique personas .
CISOs should also start by understanding the baseline of users ’ knowledge when it comes to cybersecurity . Following this initial assessment , areas that require specific attention can be identified and further training initiated .
Through personalisation and targeting , training can be tailored for each individual to ensure maximum impact and effectiveness .
Threat intelligence can also help identify individuals being targeted in specific ways – for example , with invoicing fraud scams – and technology can be used to block these at the email gateway . Through additional training on these specific threats ,
A strong security culture will positively influence how users approach and handle security issues and foster a sense of responsibility .
organisations can layer their defences through people and processes to protect their employees .
Advocates or champions can help reduce the number of users who don ’ t know if security is their responsibility . By promoting best practices and providing peer support and guidance , advocates or champions can foster trust , increase engagement , and help create a positive and collaborative security culture .
Through such schemes , along with personalised messaging that resonates with individuals , organisations can create a culture of cybersecurity awareness that empowers users to be the ultimate force of defence in the era of AI .
WWW . INTELLIGENTCISO . COM 69