Moriah Hasty
November 18, 2022
CYSE 200T
Write-Up: The Human Factor in Cybersecurity
The Human Factor in Cybersecurity: An article on how to budget as a CISO
It is my responsibility as Chief Information Security Officer to oversee cybersecurity technology and the needs of the organization’s team. As a result, I’ve devised a method to reduce the number of human errors, allowing me to spend less money on technology.
A Humans Role
There is evidence that conveys that 35% of data breaches were due to human error or negligence (Editor, Home: CSRC). A breach can cost an organization millions of dollars. These breaches happen due to a lack of training within an organization. To prevent the likelihood of this happening in my organization and save us from losing millions. I have incorporated quarterly training and awareness programs hosted by me, the Chief Information Security Officer. As well as a monthly Anti-Phishing test, which will test each individual on their knowledge of preventing unauthorized users from accessing data and preventing breaches. Failing individuals will have to complete rigorous training without pay until they are caught up.
Allocation of Funds
Due to my organization being run on limited funds, budgeting is a must. My priority is to protect my organization’s information and data, which will be protected by allocating our funds properly. Due to limited expenses, all cybersecurity training will be done by me. The Anti- Phishing test will also be created and administered by me and other appointed personnel. Since I will be creating and administering the test, the organization can save money by not having to pay thousands of dollars for a test each year for every individual in the organization. Finally, the number of IT personnel assisting the organization will be two per system. This allows us to cut our expenses by paying for less technology. Two individuals securing a system allows for less human error due to the checking of each other’s work as well as allowing the system to do its jobs.
Conclusion
In conclusion, you too can budget your organization’s funds by limiting the amount of human error. This can be done by making sure all individuals are properly trained and constantly refreshed on the training. Budgeting the organization’s finances and limiting the amount of technology you purchase can be very beneficial. Computers eventually get old or need regular maintenance, which could cost your company thousands. But having trained individuals and not relying on the systems for all the work can save an organization thousands of dollars.
Works Cited
Editor, C. S. R. C. C. (n.d.). Home: CSRC. CSRC Content Editor. Retrieved November 18, 2022, from https://csrc.nist.gov/