Balancing Security Procedures and Efficiency
Security can surely get in the way of productivity, and it’s up to the individuals on these teams to take this into consideration. At the end of the day, it’s the job of the cybersecurity team to keep IT operations working effectively.
Just as a cybersecurity incident will slow down a company’s momentum, so can careless security procedures, and communication to the end user is key. One seemingly simple change in policy may increase a company’s security posture, but it can just as easily kill productivity.
Here’s an example: Everybody's familiar with the major hack that happened at Target. And when you talk about the Target hack, the point everybody makes is that they didn't get in through a PC or a server. They got in through a subcontractor who was working on the HVAC system that is connected to the internet—it was a portal into all of its other data systems.
If we don't pay attention to those things, not only are they missed business opportunities, but they remain unguarded, unmanaged security risks. All of the people who monitor and manage technology systems, if they don't stay up to date with the new endpoint devices that are connecting to the network, they will get left behind.
If a change means making a login procedure more convoluted than it should be, it will take up more of the end user’s time, resulting in lost productivity. The bigger the company, the more impactful a change can be, since a loss in productivity can be multiplied for each employee.
Worse yet, if an end user finds a way around the security control just to get their job done more quickly, then the simple change will invoke a whole new set of problems. Having an open line of communication to the people who matter is key, but trust is the utmost important factor. If someone finds a way to circumvent a security control, they should have trust that they won’t be punished and that another solution will be considered.
More Info: a+ certification jobs near me
Just as a cybersecurity incident will slow down a company’s momentum, so can careless security procedures, and communication to the end user is key. One seemingly simple change in policy may increase a company’s security posture, but it can just as easily kill productivity.
Here’s an example: Everybody's familiar with the major hack that happened at Target. And when you talk about the Target hack, the point everybody makes is that they didn't get in through a PC or a server. They got in through a subcontractor who was working on the HVAC system that is connected to the internet—it was a portal into all of its other data systems.
If we don't pay attention to those things, not only are they missed business opportunities, but they remain unguarded, unmanaged security risks. All of the people who monitor and manage technology systems, if they don't stay up to date with the new endpoint devices that are connecting to the network, they will get left behind.
If a change means making a login procedure more convoluted than it should be, it will take up more of the end user’s time, resulting in lost productivity. The bigger the company, the more impactful a change can be, since a loss in productivity can be multiplied for each employee.
Worse yet, if an end user finds a way around the security control just to get their job done more quickly, then the simple change will invoke a whole new set of problems. Having an open line of communication to the people who matter is key, but trust is the utmost important factor. If someone finds a way to circumvent a security control, they should have trust that they won’t be punished and that another solution will be considered.
More Info: a+ certification jobs near me
Comments
Post a Comment