​​What ONE THING Will Make the Biggest Impact on Your Organization’s Cybersecurity?​

There are many blogs, vlogs, news articles, and vendors out there that will tell you all the things companies must do to combat security threats.

• Multi-Factor Authentication
• Antivirus & EDR
• Patching
• End user education
• SIEM & SOAR
• Next generation firewalls and more

It can be overwhelming to determine what your company needs and how to maintain an effective security practice going forward. We’re here to tell you it starts from the top – C-level engagement. The CEO or owner of any small to medium sized business must be actively engaged with their cybersecurity. It’s the most important thing any business can do, and it will completely transform their security posture. Cybersecurity is no longer something to be delegated and ignored.

Why is C-level engagement so important?

How does the C-level get and stay engaged?

• Ask Questions

  If the C-level executive asks 1 routine and 1 unique cybersecurity question in every recuring management meeting, you can be assured that cybersecurity will soon become embedded in the culture – this is the goal. When an owner or CEO is asking about a specific topic on a regular basis, the people reporting to that individual will make sure they have answers. That will start other conversations and actions all the way down the chain - keep asking questions.

• Risk Assessments

  A health check, vulnerability assessment, and penetration test are recommended once a year, with no more than three years maximum in between assessments. C-level executives should be requesting a variety of assessments be performed on a regular basis and should be included in the presentation of the findings.

• Education

  In addition to whatever training is mandatory for all staff, a C-level executive should invest a minimum of 4 hours per year in cybersecurity education. This can be in videos and webinars, formal self-paced training, or quality time with high level consultants. Many organizations offer virtual CIO and/or CISO offerings. It would be beneficial to hire someone to sit in the assessment findings meeting and participate in some management meetings immediately following to help educate the leadership team as a whole and help set priorities and budgets for the next 12-months.

Consistent C-Level engagement is the key to making sure everyone else in the organization understands the importance of cybersecurity and gives it the proper level of priority. Executives that don’t invest in any education often find their business failing. CEOs and owners are already keeping educated on a variety of topics like new tax laws, updated regulations, new manufacturing techniques, and new ideas for operational efficiency. Cybersecurity is no less important.