article thumbnail

10 measures for good IT security governance

CGI

Appoint a corporate IT security authority, preferably with a different reporting chain than those responsible for IT operations. Establish an internal audit and review authority with direct lines of communication to the ERRB. I invite you to read more on this topic in our white paper on IT Security Governance.

article thumbnail

CyberheistNews Vol 13 #07 [Scam of the Week] The Turkey-Syria Earthquake

KnowBe4

This means you have a bunch of users that unwittingly follow a set of unusual and unnecessary clicks that they should know better than to follow – something they learn very quickly if they are enrolled in new-school security awareness training. Blog post with links: [link] Are Your Users Making Risky Security Mistakes? "But

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

8 Tips for Building a Security-Aware Culture

KnowBe4

My colleagues at MediaPRO and I have historically had loads to say about the importance of security awareness, and there’s always more to say on that subject. More and more I’m hearing talk of “culture change” and of “creating security cultures”—conversations that go well beyond mere awareness. I’m sure you’re asking.

article thumbnail

An Approach to Cybersecurity Risk Oversight for Corporate Directors

Data Matters

Per the SEC’s recent disclosure guidance, among other things, the effectiveness of disclosure controls and procedures are tied to an organization’s ability to enhance communications between technical experts and disclosure advisors on data management processes that may address such risks.