Organisations must develop a cyber strategy and culture that considers the human element if they...
Cyber Behaviour and Culture
Most reportable data breaches are a result of human error. By focusing on understanding online human behaviour and an organisations culture, Mazars can help you to design engaging and practical cyber policies, deliver education and implement effective work practices that reduce cyber risk.
GDPR Survey Results
71% of companies say that they reported a personal data breach to the Data Protection Commission...
Why is human behavior a threat to cyber security?
Organisations face a wide range of cyber threats from hackers, disgruntled staff members and individuals who are often unaware of how their risky online behaviour could result in a costly compromise of customer, staff or company information.
Examples of human cyber risks include (but are not limited to):
- Clicking on links or attachments in suspicious scam or phishing emails; or
- Accidentally sending personal data via email to the wrong person.
Hackers are well aware of the human vulnerability and use clever phishing tactics to trick people into helping them obtain unauthorised access to company systems and information and no industry is immune from cyber attacks.
Lack of investment in cyber security policies, training and awareness is the issue
Organisations tend to invest resources in security technical measures (e.g. firewalls, patching, vulnerability scanning, anti-virus software and penetration testing, etc) to protect critical assets, but often overlook the importance of implementing effective organisational measures (policies, awareness and training).
This is evident through:
- Policies: No cyber company policy exists or has been published. If a cyber policy exists it’s overly technical, out-of-date and difficult for staff to understand;
- Training and awareness: Staff have not been trained or tested on their understanding of the cyber policy, external cyber threats and risks; and
- Roles and responsibilities: In the event of a data breach, senior management or staff members may not be clear on their role in following incident response procedures.
How can Mazars help you drive the necessary change?
Information is one of the most important assets in any organisation. Technology is the key tool employed in the management, utilisation and dissemination of this asset, but its use is not always optimised.
Privacy & GDPR Services
GDPR came into force on 25th May 2018. Mazars has supported many organisations attain GDPR compliance. We will continue to provide support to our clients in refining and maintaining compliance as the regulatory and legal environment matures.
Mazars consulting is a specialist unit within the Mazars group with an expertise spanning a wide range of areas We operate globally and thus have close links with our international counterparts frequently liaising with them on assignments.