Cyber attacks and hacking are fundamentally human behavioural issues, not just problems for the technology, antivirus or firewall to manage. From the hackers referred to in this article, to those of us in the workplace and on our phones responding to the hundreds of emails per day or managing our own/our firms' social media presence, we are the first and last stop.
An overwhelming number of these attacks start with what looks like a harmless email from a colleague or client. In professional services particularly, where trust and confidentiality are paramount, the ability to judge, question and ask in the era of cyber technology are perhaps more important than ever.
Many costly cyber attacks could have been avoided if employees were explicitly prohibited from using their company email addresses to set up personal internet accounts for e-commerce, social media, etc. In a hacker’s hands, an employee’s email can become an open-sesame for storehouses of valuable online data.
https://knowledge.insead.edu/blog/insead-blog/seeing-your-firm-through-a-hackers-eyes-10456