{"id":31426,"date":"2023-08-31T19:05:19","date_gmt":"2023-08-31T19:05:19","guid":{"rendered":"https:\/\/mssolutions.ca\/?p=31426"},"modified":"2024-05-21T19:34:53","modified_gmt":"2024-05-21T19:34:53","slug":"vigilance-are-you-getting-the-most-out-of-the-platform","status":"publish","type":"post","link":"https:\/\/mssolutions.ca\/en\/blogue\/cybersecurite-en\/vigilance-are-you-getting-the-most-out-of-the-platform\/","title":{"rendered":"Vigilance: are you getting the most out of the platform?\u00a0"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Considering that 82% of security breaches in an organization are the result of human error (<\/span>Verizon, 2023<\/span><\/a>), and that 1 in 5 email attacks is successful (<\/span>Tessian, 2022<\/span><\/a>), it’s safe to say that cybercriminals have no shortage of tricks to dupe your employees into clicking on a fraudulent link. It is therefore essential to create a culture of cybersecurity prevention today.<\/span>\u00a0<\/h4>

In response to this constant threat, last year the MS solutions team introduced you to its continuous phishing simulation platform, <\/span>Vigilance<\/span><\/a>. To help you get the most out of the platform, we’re publishing an article today dedicated to maximizing its use.<\/span>\u00a0<\/span><\/p>

You’ll discover why most awareness campaigns fail, Vigilance’s strengths, and tips for building a culture of cybersecurity prevention, from communication to performance measurement.<\/span>\u00a0<\/span><\/h4>

Why<\/span> do <\/span>most<\/span> awareness<\/span> campaigns<\/span> fail?<\/span><\/span><\/strong>\u00a0<\/span><\/span><\/h3>

Cybersecurity<\/span> awareness<\/span> is<\/span> a <\/span>cornerstone<\/span> of online <\/span>threat<\/span> prevention<\/span>. <\/span>However<\/span>, <\/span>despite<\/span> efforts to <\/span>inform<\/span> employees<\/span> about <\/span>cybersecurity<\/span> best practices, <\/span>many<\/span> awareness<\/span> campaigns<\/span> fail to <\/span>achieve<\/span> the <\/span>desired<\/span> results<\/span>. <\/span>Let’s<\/span> delve<\/span> into<\/span> the <\/span>most<\/span> common<\/span> reasons<\/span> why<\/span> these<\/span> campaigns<\/span> fail to <\/span>achieve<\/span> their<\/span> objective.<\/span><\/span>\u00a0<\/span><\/span><\/p>

  1. Don’t <\/span>just<\/span> tell <\/span>employees<\/span> what<\/span> they<\/span> shouldn’t<\/span> do, <\/span>without<\/span> emphasizing<\/span> positive <\/span>safety<\/span> knowledge<\/span> or <\/span>behaviors<\/span>.<\/span><\/span><\/b> Too<\/span> often<\/span>, <\/span>awareness<\/span> campaigns<\/span> focus on <\/span>what<\/span> not to do, <\/span>rather<\/span> than<\/span> on the positive <\/span>safety<\/span> actions <\/span>employees<\/span> should<\/span> adopt<\/span>. <\/span>Instead<\/span> of <\/span>simply<\/span> listing the <\/span>mistakes<\/span> to <\/span>avoid<\/span>, <\/span>it’s<\/span> essential to <\/span>provide<\/span> concrete<\/span> advice<\/span> on the <\/span>steps<\/span> you<\/span> can <\/span>take<\/span> to <\/span>strengthen<\/span> your<\/span> organization’s<\/span> security<\/span> posture. Vigilance <\/span>incorporates<\/span> this<\/span> philosophy<\/span> by <\/span>highlighting<\/span> the <\/span>behaviors<\/span> and <\/span>knowledge<\/span> that<\/span> foster<\/span> a culture of <\/span>prevention<\/span>.<\/span><\/span>\u00a0<\/span><\/span><\/li>
  2. Focusing<\/span> too<\/span> much<\/span> on phishing<\/span><\/span>.<\/span><\/span><\/span><\/b> While<\/span> phishing <\/span>is<\/span> undeniably<\/span> a major cyber-<\/span>attack<\/span> tactic<\/span>, <\/span>it’s<\/span> only<\/span> part of the <\/span>equation<\/span>. <\/span>Awareness<\/span> campaigns<\/span> should<\/span> not <\/span>be<\/span> limited<\/span> to <\/span>this<\/span> aspect <\/span>alone<\/span>, but <\/span>rather<\/span> address<\/span> a <\/span>wide<\/span> range of <\/span>potential<\/span> threats<\/span>, <\/span>from<\/span> malware to social engineering <\/span>attacks<\/span>. Vigilance <\/span>offers<\/span> a <\/span>holistic<\/span> approach<\/span> to <\/span>awareness<\/span>, <\/span>covering<\/span> a <\/span>variety<\/span> of cyber <\/span>threat<\/span> scenarios.<\/span><\/span><\/li>
  3. Use content <\/span>that<\/span> is<\/span> neither<\/span> contextual<\/span> nor<\/span> specific<\/span> to the <\/span>organization<\/span><\/span>.<\/span><\/span><\/span><\/b> Generic<\/span>, non-<\/span>organizational<\/span> content can <\/span>seem<\/span> impersonal<\/span> and <\/span>irrelevant<\/span> to <\/span>employees<\/span>. <\/span>Successful<\/span> awareness<\/span> campaigns<\/span> take<\/span> into<\/span> account<\/span> the <\/span>organization’s<\/span> specific<\/span> culture, <\/span>processes<\/span> and challenges. Vigilance <\/span>offers<\/span> customizable<\/span> content <\/span>that<\/span> can <\/span>be<\/span> tailored<\/span> to <\/span>each<\/span> company’s<\/span> unique <\/span>needs<\/span>.<\/span><\/span><\/li>
  4. Measuring<\/span> the <\/span>success<\/span> of a program <\/span>based<\/span> primarily<\/span> on <\/span>execution<\/span> rather<\/span> than<\/span> effectiveness<\/span>.<\/span><\/span><\/b> Simply <\/span>taking<\/span> part in training or passing a phishing simulation <\/span>does<\/span> not <\/span>guarantee<\/span> that<\/span> employees<\/span> have <\/span>acquired<\/span> the <\/span>skills<\/span> needed<\/span> to <\/span>detect<\/span> and <\/span>prevent<\/span> threats<\/span>. <\/span>Awareness<\/span> campaigns<\/span> need<\/span> to <\/span>be<\/span> evaluated<\/span> on <\/span>their<\/span> actual<\/span> effectiveness<\/span> in <\/span>reducing<\/span> incidents and <\/span>reinforcing<\/span> a culture of <\/span>prevention<\/span>.<\/span><\/span>\u00a0<\/span><\/span><\/li>
  5. Reprimand<\/span> people <\/span>who<\/span> fail a phishing simulation. <\/span><\/span><\/b>A punitive <\/span>approach<\/span> to <\/span>employees<\/span> who<\/span> fail phishing simulations can <\/span>create<\/span> an <\/span>atmosphere<\/span> of <\/span>fear<\/span> rather<\/span> than<\/span> constructive <\/span>awareness<\/span>. The <\/span>truth<\/span> is<\/span> that<\/span> anyone<\/span> can <\/span>be<\/span> fooled<\/span> by a <\/span>well-designed<\/span> simulation. <\/span>It’s<\/span> better<\/span> to use <\/span>these<\/span> failures<\/span> as <\/span>learning<\/span> opportunities<\/span> to <\/span>reinforce<\/span> detection<\/span> skills<\/span>.<\/span><\/span>\u00a0<\/span><\/span><\/li>
  6. Benefit<\/span> from<\/span> good <\/span>tools<\/span>, but <\/span>neglect<\/span> their<\/span> support.<\/span><\/span><\/b> Even the best <\/span>awareness-raising<\/span> platforms <\/span>can’t<\/span> deliver<\/span> optimal <\/span>results<\/span> without<\/span> proper<\/span> support. Managers and <\/span>supervisors<\/span> must <\/span>play<\/span> an active <\/span>role<\/span> in <\/span>providing<\/span> guidance, <\/span>answering<\/span> questions and <\/span>encouraging<\/span> employee<\/span> participation.<\/span><\/span><\/li><\/ol>

    Vigilance: highlights<\/span><\/span><\/span><\/b>\u00a0<\/span><\/h3>

    Now<\/span> that<\/span> we’ve<\/span> explored<\/span> the <\/span>common<\/span> challenges in <\/span>cybersecurity<\/span> awareness<\/span> campaigns<\/span> and the importance of <\/span>creating<\/span> a culture of <\/span>prevention<\/span>, <\/span>it’s<\/span> time to dive <\/span>into<\/span> the <\/span>strengths<\/span> that<\/span> make<\/span> Vigilance an <\/span>exceptional<\/span> platform, <\/span>from<\/span> both<\/span> an <\/span>employee<\/span> and manager perspective.<\/span><\/span>\u00a0<\/span><\/span>\u00a0<\/span><\/p>

    From<\/span> the <\/span>employee’s<\/span> point of <\/span>view<\/span>:<\/span><\/span>\u00a0<\/span><\/span><\/b>\u00a0<\/span><\/h5>