Huntress Urges Organizations to Build a More Open Cybersecurity Culture

Summary

Huntress argues that fear of embarrassment or punishment can discourage people from reporting cyber incidents, and recommends open communication, shared experiences, and engaging security awareness training.

Key points

• The article identifies fear of looking foolish and fear of getting in trouble as reasons employees may stay silent about cyber incidents.
• It recommends encouraging employees to report phishing and other security issues without blame.
• Huntress suggests sharing cyberattack experiences and providing engaging training on topics including ransomware, smishing, malware, passwords, and social engineering.
• The article says leaders should build trust and keep communication open so employees feel comfortable raising security concerns.
• It describes older adults, young adults, remote workers, and people who work closely with executives as groups it considers especially vulnerable to attacks.