Naomi Haefner explains why raising awareness and providing adequate training must be the first line of defense against cyberattackers.
How AI is changing the cybersecurity landscape
AI is giving cyberattackers a wider range of targets and the opportunity to scale up. Hackers can manipulate AI tools such as chatbots by feeding them malicious information or asking them to reveal sensitive company data. Attackers also increasingly target employees directly, with sophisticated deepfake technology enabling highly convincing phishing and impersonation attacks. This means organizations must think beyond technological solutions and make people their first line of defense against attack.
The two essential ingredients of a successful cybersecurity cultureÂ
Targeted and continuous training
With new styles of attack appearing all the time, ongoing training and clear communication are essential to keep employees up to speed with evolving threats. This means that “bite-sized” units of training delivered as a regular feature of the working day are more effective than, say, an annual 20-minute video. Organizations must also gain a general understanding of employees’ digital behaviors, including how different departments communicate, to reveal gaps in process or understanding.
Psychological safety
While close monitoring of employee digital activity is crucial, organizations must not allow security practices to erode trust. If employees fear blame, feel constantly watched, or believe they will be punished for an honest mistake, they may delay reporting, gifting attackers extra time.
A crucial element of psychological safety and a positive cybersecurity culture in general is transparency. Employees need to understand what is being monitored, why it is necessary, and where the boundaries are. Making every employee aware of cybersecurity processes helps everyone feel safer and reinforces the sense that they are on the same side.
Checklist
Answer these questions to assess whether your cybersecurity strategy is people-first:
Is our training ongoing or static?
Do we understand employees’ digital behaviors?
Do we know how different departments communicate?
Does the cybersecurity team feel supported and understood?
Do employees understand what is being monitored and why it is necessary?
Are our cybersecurity processes known and understood by everyone?
Key takeaway
Organizations that treat cybersecurity as a human issue as much as a technical one will build the most effective resilience against the evolving risk environment.
Professor of Artificial Intelligence and Innovation
Naomi Haefner is Professor of Artificial Intelligence and Innovation. Her research examines how artificial intelligence is reshaping innovation strategy, organizational design, and leadership decision-making.
Her work bridges rigorous academic insight with practical application. As a researcher, educator, and advisor, she designs and delivers executive education programs for board members, senior leaders, and public-sector innovators navigating complex technological change. Her approach integrates frameworks that equip leaders to respond to fast-moving developments with structure and impact.
CHROs can help businesses move past mistrust of AI and support workforce adoption. Ask yourself these six questions to make sure you’re easing the way and not piling on top-down pressure. …
Alfredo De Massis shows how to tap into existing ideas and knowledge to innovate and stay competitive….
Learn Brain Circuits
Join us for daily exercises focusing on issues from team building to developing an actionable sustainability plan to personal development. Go on – they only take five minutes. Read moreÂ
Explore Leadership
What makes a great leader? Do you need charisma? How do you inspire your team? Our experts offer actionable insights through first-person narratives, behind-the-scenes interviews and The Help Desk. Read more
Join Membership
Log in here to join in the conversation with the I by IMD community. Your subscription grants you access to the quarterly magazine plus daily articles, videos, podcasts and learning exercises. Sign up
Log in or register to enjoy the full experience
Explore first person business intelligence from top minds curated for a global executive audience