How high is the risk of cyber incident in your organization?

Arab News

2 days ago

One of the core reasons businesses remain vulnerable to cyberthreats is that they underestimate their risk or overestimate the strength of their existing defenses. According to a recent Kaspersky survey titled 'Cybersecurity in the workplace: Employee knowledge and behavior,' 45.5 percent of professionals surveyed in Saudi Arabia, whose work requires the use of computers, assess the risk of a cybersecurity incident happening to their company as quite possible.
Commenting on the probable consequences of a cybersecurity incident, 52 percent of employees surveyed supposed that it might seriously affect the company. This understanding of risks comes not only from general cybersecurity awareness, but also from knowledge about cyber incidents in their organizations: 30.8 percent of respondents acknowledged such incidents happened in the past 12 months, while an additional 29.8 percent said they have heard about these incidents from colleagues.
Organizations nowadays face a variety of cyberthreats ranging from phishing and business email compromise to ransomware and advanced persistent threats. In a lot of these attacks, the entry point into the organization's network is via a human mistake, and it is for that reason attackers actively employ social engineering techniques and AI tools to make their efforts more effective.
The survey shows that the majority of respondents understand that cybersecurity is an issue that should be considered by the IT department, while 33.8 percent also mentioned top level executives and 18.8 percent cited legal and financial employees as core groups within the business who should keep cybersecurity issues in mind. Only 28.5 percent of employees surveyed viewed cybersecurity as an issue that should be considered by all employees across the entire business.
'In today's digital landscape, cybersecurity is a collective responsibility that extends beyond the IT department. Every employee should remain vigilant against evolving threats. Regular cybersecurity training, use of relevant IT solutions, well-defined policies and an incident response plan are essential pillars of organizational cyber resilience. When every team member is informed and prepared, the organization stands stronger against cyberthreats,' said Toufic Derbass, managing director for the META region at Kaspersky.
To help organizations strengthen their defenses, Kaspersky recommends the following:
• Employee education and cybersecurity training is necessary as human error is a common cause for cybersecurity breaches. Solutions such as Kaspersky Automated Security Awareness Platform can help with practical cybersecurity skills such as recognizing phishing emails and suspicious links.
• Upskill cybersecurity teams with Kaspersky online trainings, and with Kaspersky Threat Intelligence. In addition, Kaspersky's Digital Footprint Intelligence can help with monitoring external threats for companies' assets, strengthening defense against credential leaks.
• Implement robust monitoring and cybersecurity solutions, for example from the Kaspersky Next product line.
• Set up offline backups that intruders cannot misuse, and make sure you can access them quickly in an emergency.
• Implement security policies for employees, from password and software installation policies to network segmentation.
• Foster a culture of security: encourage employees to report suspicious activity without fear of blame, reward proactive security behaviors to reinforce good habits, for example during phishing simulations.