GOVERNANCE, RISK MGT AND COMPLIANCE

SECURITY AWARENESS TRAINING FOR STAFF

Few months ago, I was preparing a PowerPoint presentation on what a PASSWORD RE-USE and MIS-CLICK can Cause.

As such, the COLONIAL PIPELINE RANSOMWARE SCANDAL was top on my list at the time.. I can’t just imagine how a vast nation’s energy infrastructure with advanced security system can be brought to their knees through RANSOMWARE ATTACK that came from an employee that lacks Seasoned Security Awareness..#HUMAN ERROR.

Meaning , this is not about the TOP level management, MIDDLE and LOW level. Even the great man on hill (CEO) can make a mistake causing the entire organization to crumble. Why? Because that individual is human. That been said, Sec+ Awareness training must be attended by all to keep everyone in the know.(Physically/Virtually).

With the Evolving Technological Landscape, Not just the system alone, the individuals around every Critical and Non-critical infrastructure must be agile enough to mitigate security risk.

#GRC #ISO/IEC 27001 ASSOCIATE #POLICY #PRINCIPLE OF LEAST PRIVILEGE