In the News

But while it may seem like everything is influenced by a robot or machine, cybersecurity is most impacted by humans, not robots.

The “human element” refers to the people involved in the cybersecurity process, including executives, employees, customers and other stakeholders. A 2022 Data Breach Investigation Report by Verizon reported that roughly 82% of breaches involved the human element, meaning a breach was caused by a phishing attempt, misuse of credentials, or other human errors within a system.

To mitigate risk associated with the human element, take steps to educate everyone within your business about cybersecurity best practices. This includes:

• Robust and frequent training on common security threats - Repetition, repetition, repetition. Continual reminders about cyber risks and frequent systems evaluations will help individuals keep cybersecurity top of mind.
• Strong, complex passwords – Require individuals to use unique passwords to access business data to keep information secure. The use of password management software can help keep long, complex passwords organized and easily accessible by the user.
• Multifactor identification and authentication management – Whenever possible ask all employees to use multifactor authentication (MFA), which is much more secure than a single user ID and password login.
• Clear understanding of best practices for email – Support people by providing frequent reminders about best email practices and the risks of clicking on links, opening attachments and downloading software from unknown sources.

Every business – large or small - places an immense amount of trust in the individuals they bring on board. These individuals are the last line of defense, and their day-to-day actions can greatly impact the level of risk associated with secure information. When everyone works together to be vigilant, report phishing scams, and think critically about certain requests, the company remains well protected and the human element of the organization becomes a positive asset, rather than a risk.

The human element will always be a critical factor in managing cybersecurity risk. By taking the steps above, your people will be better educated and the risk from security incidents will be minimized.