Кибербезопасность: правила игры. Как руководители и сотрудники влияют на культуру безопасности в компании

In April 2021, the data of more than half a billion Facebook users went public. In particular, one of the hacker forums published Mark Zuckerberg's phone number. Did the founder of one of the largest social networks protect his data, did he follow cybersecurity measures? Of course he did. But when it comes to cybercrime, even the best protection is not enough. According to a 2018 Verizon study on data breaches, employees are directly or indirectly responsible for a quarter of all company hacks. By improving staff cyber hygiene and preparing them for possible information threats, the risk of a company data breach can be greatly reduced and reputation can be preserved if it does happen. Allison Serra, senior vice president and chief marketing officer at McAfee, wrote the book Cyber Security: The Rules of the Game for people who want to prepare their company for possible attacks from the cybercriminal world. The book is full of easy-to-apply advice on how to make a company as secure as possible: teach employees how to handle personal and corporate data correctly, find missing information security specialists, include the board in these discussions, build in security tools at the product development stage and respond to hacks in a timely and competent manner. By making cybersecurity part of the organisation's culture, the likelihood of a company being hit by an information attack is much lower.