No matter how much cyber security technology and tools we purchase, every enterprise still faces a fundamental security challenge: human error. The biggest risk noted time and time again by many CISOs and security professionals alike, is still the user inadvertently clicking something.
See Related: “6 Tips To Improve Security Awareness At Your Company”
And while employees go through security awareness and training programs, at the end of the day they are still people and have to deal with the constantly evolving hacker that taps into human nature and emotion. That is why CS Hub is hosting an upcoming webinar that will explore the different levers that adversaries, social engineers and scam artists pull, that make it more likely for us to click on that “urgent” or “important” link.
See Related: “6 Ways to Identify Phishing Attack Emails”
“All warfare is based on deception,” said by Sun Tzu in The Art of War. As covered and expanded upon in the web session, 98% of attacks rely on social engineering. Since attackers go for the low-hanging fruit, humans will always be the greatest risk to any enterprise. This can be the biggest challenge as well as the greatest opportunity for any organization.
Key Takeaways
KnowBe4’s Chief Evangelist and Strategy Officer Perry Carpenter, provides fun and engaging examples of mental manipulation in everyday life: from the tactics used by oily car dealers, to sophisticated social engineering and online scams. Additionally, the web session looks at how to ethically use the very same levers when educating employees. Attendees will learn:
- The perception versus reality dilemma.
- Understanding the OODA loop: Observe, Orient, Decide, Act.
- How social engineers and scam artists achieve their goals by subverting the OODA loop's different components.
- How we can defend ourselves and the enterprise.
Cyber security is a holistic exercise that depends on the efforts of the security team, including CISOs, CSOs, VPs of Information Security, along with other lines of business. Critical security information must be passed along the proper channels – outward to the employee base and upward to the C-Suite and board of directors. That means everyone must have a knowledge base around cyber security. This doesn’t mean they must be technical wizards, but awareness could be key in preventing a pervasive cyber attack.
To get inside the tactics of hackers and learn how to better protect the enterprise register for the upcoming webinar:
“Levers of Human Deception: The Science and Methodology Behind Social Engineering.”