Three key steps for CFOs in the AI era
CFOs in the AI era: design data-models and workflows that maximize value, redefine productivity, and establish transparent AI governance....
Brain Circuits
Why cybersecurity starts with your people
Naomi Haefner explains why raising awareness and providing adequate training must be the first line of defense against cyberattackers.
How AI is changing the cybersecurity landscape
AI is giving cyberattackers a wider range of targets and the opportunity to scale up. Hackers can manipulate AI tools such as chatbots by feeding them malicious information or asking them to reveal sensitive company data. Attackers also increasingly target employees directly, with sophisticated deepfake technology enabling highly convincing phishing and impersonation attacks. This means organizations must think beyond technological solutions and make people their first line of defense against attack.
The two essential ingredients of a successful cybersecurity cultureÂ
Targeted and continuous training
With new styles of attack appearing all the time, ongoing training and clear communication are essential to keep employees up to speed with evolving threats. This means that “bite-sized” units of training delivered as a regular feature of the working day are more effective than, say, an annual 20-minute video. Organizations must also gain a general understanding of employees’ digital behaviors, including how different departments communicate, to reveal gaps in process or understanding.
Psychological safety
While close monitoring of employee digital activity is crucial, organizations must not allow security practices to erode trust. If employees fear blame, feel constantly watched, or believe they will be punished for an honest mistake, they may delay reporting, gifting attackers extra time.
A crucial element of psychological safety and a positive cybersecurity culture in general is transparency. Employees need to understand what is being monitored, why it is necessary, and where the boundaries are. Making every employee aware of cybersecurity processes helps everyone feel safer and reinforces the sense that they are on the same side.
Checklist
Answer these questions to assess whether your cybersecurity strategy is people-first:
- Is our training ongoing or static?
- Do we understand employees’ digital behaviors?
- Do we know how different departments communicate?
- Does the cybersecurity team feel supported and understood?
- Do employees understand what is being monitored and why it is necessary?
- Are our cybersecurity processes known and understood by everyone?
Key takeaway
Organizations that treat cybersecurity as a human issue as much as a technical one will build the most effective resilience against the evolving risk environment.
Authors
Related
Is AI scaling your worst habits?Â
Could AI mirror your organization’s worst habits? Five actionable steps turn human systems into robust infrastructure with clear values and governance....
Radical federalism: The way to tackle the AI velocity problem
Question central planning: why a unit-focused hybrid approach may outperform both centralized control and chaotic AI adoption....
How to reassure people about AI: A checklist for CHROs
CHROs can help businesses move past mistrust of AI and support workforce adoption. Ask yourself these six questions to make sure you’re easing the way and not piling on top-down pressure. ...
Learn Brain Circuits
Join us for daily exercises focusing on issues from team building to developing an actionable sustainability plan to personal development. Go on - they only take five minutes.
Â
Explore Leadership
What makes a great leader? Do you need charisma? How do you inspire your team? Our experts offer actionable insights through first-person narratives, behind-the-scenes interviews and The Help Desk.
Â
Join Membership
Log in here to join in the conversation with the I by IMD community. Your subscription grants you access to the quarterly magazine plus daily articles, videos, podcasts and learning exercises.
Â