Why are insider threats among the top cybersecurity risks?
According to Verizon’s 2024 Data Breach Investigations Report, 68% of all breaches are caused by the human factor.
The primary reason: A lack of or weak cybersecurity awareness training practices for employees with access to sensitive data, which leads to carelessness and accidental errors.
These errors could lead to a breach, which could lead to thousands, if not millions, of dollars in losses.
I've sat through these trainings that organizations provide for their employees, and I'm talking about organizations of all sizes - from Fortune 500 companies to startups.
It's always an online training course, and they're always booorr-ring! 😴 😴
No wonder many employees tune out and create a breach. Your little test at the end of each module? They're cute but easily passable for even the most tuned-out student.
Here's what I've learned as an instructor: Adults learn differently. We all have different learning styles. Some are visual learners, and others are kinesthetic, while some may be auditory learners and others more interpersonal.
Some learn from reading, others from charts and graphs, and still others from social interaction.
I incorporate all of these into every class, whether it's a 90-minute class or a 2-day workshop.
Personally, I am more of a linguistic and auditory learner. I learn more from reading and Podcasts, than watching an online video or taking an online course.
Of course, I can't be an effective firearms instructor without kinesthetic learning, and neither can my students. Shooting is literally hands-on.
Real-life analogies are also a big part of my teaching. I can give students the technical instruction, but it's really when they get something that's personally relatable is when it clicks.
So, if you are responsible for your organization's cybersecurity awareness and training, it might be time to step up your game. Don't just offer a one-and-done online course.
Do live bi-annual or even quarterly trainings. Make them interactive for the interpersonal learners, hands-on for the kinesthetic learners, have great speakers for the auditory learners, and provide excellent written materials for the linguistic learners.
Training your diverse staff in a way that each individual staff member gets it will no doubt reduce insider threats and bolster your cyber security posture.
