Cyber security |
Cybersecurity needs to be embedded as an ideology in organisations and flipping mindsets is key to this
At what cost?
With cybersecurity continuing to be a risk within the hydropower and dams industry, an increased focus on the value of investments in digital security will help enable enhanced decision-making for stakeholders
Below: Threat actors increasingly see humans as the most vulnerable point of exploitation
ORGANISATIONS HAVE PREVIOUSLY DEVELOPED their cybersecurity programmes to address regulatory changes, business decisions, customer demands and threats but, as a recent Gartner report by Gopal et al predicts, the challenges confronting cybersecurity leaders in the future are evolving beyond technology, cybersecurity, and controls.
“Modern cybersecurity leaders will use a human- centric design to strengthen their programme and optimise human potential,” the report states, adding that meeting these challenges will require a redoubled focus on people.
One concern is that burnout has made its way into the cybersecurity industry, and little is being done to address this. It has been suggested that by 2025, nearly half of cybersecurity leaders will change jobs and a quarter of these will choose different roles entirely due to multiple work-related stress. As Gopal et al explain, burnout coupled with less than zero percent unemployment in this industry enables employees to find “greener or even just different pastures at will”. And to mitigate this, industry leaders are being urged to focus on the health and well-being of their cybersecurity teams.
12 | October 2023 |
www.waterpowermagazine.com
“Care and feeding alone is not enough”, the report warns. “A key stressor of our work is that often our teams are playing a game they can’t win because they are always playing defence. We must find opportunities for our teams to be recognised for putting ‘points on the board’ rather than just blocking opponents.”
Human error Human error can also be used as a key indicator
of cybersecurity-process-related fatigue within organisations, as stress and burnout have a direct impact on the quality of decision making. By 2025, the Gartner report predicts that a lack of talent or human failure will be responsible for over half of significant cyber incidents – quite simply because humans are a principal cause of cybersecurity failures. The number one reason why an employee chooses to act unsecurely is for increased speed or convenience, followed by a lack of personal consequences and business needs outweighing risk. “The number of cyber and social engineering attacks against people is spiking as threat actors increasingly see humans as the most vulnerable point
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52 |
Page 53
