“Employees are a company’s greatest asset – they’re your competitive advantage. You want to attract and retain the best; provide them with encouragement, stimulus, and make them feel that they are an integral part of the company’s mission.” — Anne M. Mulcahy
Your employees are the life of your company and you’ve done a remarkable job growing your business by hiring the right people for the right positions. These amazing people are educated, intelligent, experienced, customer focused, and results driven. They are exactly who you needed when you hired them. They are exactly who you need to continue to grow your business. They are not IT Professionals.
Even the smartest and brightest get lured in by a well-crafted, malicious social-engineering attempt. It has happened countless times. A valued employee opens an email appearing to be from a legitimate source. This email contains a link to an item they believe they need in order to do their job – be it an invoice, a shipping manifesto, or maybe even a shared document from accounting. The link is clicked. That’s all the ‘bad guys’ needed to get their hooks into your company. From ransomware (or, as in the recent past with WannaCry and NotPetya, a ransomworm) to malware, from trojans to keyloggers, the payload is delivered to the unsuspecting victim. If it stopped there, it would be an inconvenience, but malware is intended to ferret out weaknesses in organizational security to replicate, steal, or harm.
When things go wrong, please try to remember, they are not IT Professionals, they are exactly who you hired them to be – your HR manager, receptionist, executive assistant, payroll clerk, sales representative. They are not usually trained to spot a ‘fake’ email. But they can be.
Hiring an IT Professional to conduct a vulnerability assessment could be the next best investment you make. This assessment should fit your business and it’s a key component in your overall security landscape. If you’d like to learn more or arrange employee training, please call or email me. I’d love to work with you and your people.
Your employees are fantastic – they are your company’s strength. And with a bit of security training, they can be an even greater asset to you and your customers.