True Office Learning Blog

Security awareness training is important, but it doesn’t eliminate cyber risk. In fact, when organizations only implement security awareness training and nothing else, it can potentially lead to internal mishaps and security catastrophes. After all, 77 percent of last year’s data breaches involved company insiders. 

Verizon recently published the 2019 Data Breach Investigations Report (DBIR). The DBIR is a respected source for insights on on cyberthreats plaguing businesses. This latest version of the report is the most comprehensive to date, using data provided by 73 sources from 86 countries, including 41,686 reported security incidents and 2,013 data breaches.

Survey after survey has shown that company insiders, such as employees or vendors, can pose a significant risk to a company’s ability to protect its trade secrets—whether the insider acts with or without malicious intent—the question for many companies becomes: what should I do to minimize this risk?

Most of the cybersecurity statistics you’ll read about are gloom and doom. The websites and reports aggregating this information may include adjectives such as “terrifying,” “alarming,” or “scary” to get their point across: The digital world is a risky landscape.

Managing your organization’s compliance training can be a daunting undertaking for compliance professionals and HR personnel already dealing with other priorities on their plates. Designing, implementing, and maintaining training in-house ramps up the difficulty level even more.