Four Steps to Have Employees Report Security Incidents (And Save the Day)

Some insist on the contrary, but any of your colleagues can be a valuable contributor to your company’s security efforts. An example is when you do not have systems, rules or training to cover an unforeseen event, but people improvise to stay both as productive and secure as possible. Risk-based trade-offs like this happen a lot – although people will not necessarily tell you when it happens – but that’s how business gets done. Another example is when people report incidents (or potential ones), allowing your organisation to improve and become more resilient to cyber-attacks.

Reporting security incidents should never get yourself or colleagues into trouble. Instead, it allows for specialists to handle the situation, and for the organisation to learn.

Continue reading “Four Steps to Have Employees Report Security Incidents (And Save the Day)”