Cyber Hygiene should not be seen as an additional burden

Cyber Hygiene is as much about doing the right thing as it is about not doing the wrong thing. Whether its is IT / Cyber staff or not, staff are too often the weak point in your defences but don't be too ready to point the finger. If you expect staff to meet KPIs but then add some extra steps so you can meet your Cyber Security goals, expect them to try to find workarounds so they can still meet their KPIs.

There was a time when cars were not the targets of thieves. Then times changed so we added locks. We reached over and manually locked each door and then got out the driver's door and locked it with a key and off we went. Sadly we are lazy and that became too much trouble, so, someone created central locking. Just by locking the driver's door all the other doors locked too. We didn't need to understand locks or solenoids, it just worked. Then the simple act of putting the key in the lock and turning it became too much trouble so someone invented remote locking. Then came alarms, then immobilisers, now satellites can shut many cars down. With every convenience comes another method for thieves to exploit us, but that is the price of convenience.

If you have processes that lack Cyber Hygiene just adding an additional step to fill the gap is an additional burden on staff already familiar with their jobs. Three options really stand out in this space,

analyse and uplift your processes, called Business Systems Analysis,

use better, (or better use your existing) technology or tools to support them, or

provide training that shows staff the potential consequences of non-compliance, and then explain to them how the new procedures protect everyone.

Celtech never have, and never will, see Cyber Security as a box to tick on a form, Cyber Security is a fundamental function of any enterprise who is planning on longevity.