Category Archives: security culture

Five tips to help execute an employee training program

Posted on by

One of the best ways to reduce the risk of data breaches is employee training. This is particularly important during the fall “back to business” season when many employees are returning to the office after a well-deserved summer break, according to Shred-it. According to a new survey conducted by Ipsos, US companies are not prioritizing employee training in their fight against fraud and data breaches. Seventy-eight percent of US Small Business Owners and 51 per … More → Continue reading Five tips to help execute an employee training program→

How US, UK SMBs keep company passwords safe

Posted on by

AVG’s Business division has asked 381 of their small-to-medium business customers in the US and UK sixteen questions about their password-protection policies and practices. The replies they received allowed them to paint a general picture of how SMBs address (or not) the issue of password security. Survey results 72 percent of the respondents said they believe their passwords are safe (i.e. not accessible by unauthorized personnel). But, interestingly enough, only 22 percent of the businesses … More → Continue reading How US, UK SMBs keep company passwords safe→

Security startup confessions: Building a team

Posted on by

My name is Kai Roer and I am a co-founder of a European security startup, and these are my confessions. I hope you will learn from my struggles, and appreciate the choices startups make when security matters. I will share experiences from my own startups (my first was in 1994), and things I have learned by watching and advising numerous other startups around the world. Today, I will share my experiences in building a team. … More → Continue reading Security startup confessions: Building a team→

Boardroom execs still don’t know the value of data

Posted on by

Almost two thirds of businesses still don’t know the value of critical data assets being targeted by cybercriminals. IRM surveyed security heads at their recent conference, and found that just 28 per cent of CISOs regularly conduct exercises to categorise and value the data within their IT estate in order to evaluate the risk associated with its loss. 55 per cent have taken partial action, while 17 per cent had taken no action at all. … More → Continue reading Boardroom execs still don’t know the value of data→

Assess, build and improve security culture with CLTRe

Posted on by

Norwegian security startup CLTRe announced a new product series, enhancing its existing Saas offering, the Security Culture Toolkit. This new range consists of CLTRe Control, CLTRe Discover and CLTRe Improve, which provide customers with a suite of tools to assess, build and improve the security culture within their organization. According to Gartner, 2.6 Billion USD is spent on security awareness training each year, across the globe. With this in mind, CLTRe highlights the value of … More → Continue reading Assess, build and improve security culture with CLTRe→

Security startup confessions: Let’s talk about channel management

Posted on by

My name is Kai Roer and I am a co-founder of a European security startup, and these are my confessions. I hope you will learn from my struggles, and appreciate the choices startups make when security matters. I will share experiences from my own startups (my first was in 1994), and things I have learned by watching and advising numerous other startups around the world. My company, CLTRe, assesses, builds and improves security culture for … More → Continue reading Security startup confessions: Let’s talk about channel management→

Organizations unprepared for employee-caused security incidents

Posted on by

While employee-related security risks are the number-one concern for security professionals, organizations are not taking adequate steps to prevent negligent employee behavior, according to a new Ponemon Institute study. The study, Managing Insider Risk Through Training & Culture, asked more than 600 individuals at companies that currently have a data protection and privacy training program to weigh in on the topic of negligent and malicious employee behaviors, as well as the consequences of poor security … More → Continue reading Organizations unprepared for employee-caused security incidents→