We keep recommending creating an ERP cybersecurity culture. Naturally, it’s among the best investments you can make. That’s because you can target inside and outside threats.
But, how can you nurture this culture? We’re diving into a new ERP series today.
This is the first article in a series detailing how Yahoo created its culture.
Let’s begin.
Why you can’t forget about ERP cybersecurity culture
Typically, security culture is a combination of ideas and behaviors within a firm. It instills the ideal mindset in your employees. In other words, you don’t have to micromanage their practices.
The pandemic made everything worse
Obviously, COVID-19 created new cultures and structures. Remote work becoming a standard is the most obvious one. Unfortunately, that creates a plethora of new security risks.
These days, strong security culture is more important than ever.
Let’s learn ERP cybersecurity culture from Yahoo: 5 Crucial Areas
Now, Yahoo didn’t turn its culture around in a day. It was a huge effort with equal investment. So, we can’t cover everything in one article. But, we can summarize the primary steps below.
#1. Proactive engagement
Firstly, they divided employee engagement into different categories. So, it let them measure cyber threat responses and security practices. It provides a measurable foundation for the task.
#2. Behavioral change
Secondly, they identified the context around behaviors. This involves a bunch of steps:
- Identifying behavioral goals.
- Creating a baseline and measure method.
- Acting on that data to change the desired behavior over time.
#3. Behavioral measurements
So, that takes us to said measure methods. Luckily, the original report explains three options:
- Susceptibility rate, which divides safe and compromised users.
- Credential capture rates, which monitor credentials usage.
- Reporting rate, which counts how many users reported issues.
#4. Incentives program
Of course, incentives play a huge role in creating habits. The report offers several examples: branded clothes and accessories, gamification, and competitions.
#5. Management action
Finally, we have actionable tips for managers. In the original article, they explain three steps:
- Identifying critical behaviors from employees.
- Measuring these behaviors transparently.
- Using awareness to explain the importance of these changes.
How can you nurture an ERP cybersecurity culture?
Typically, the best step is to invest in proper training. But, you can do lots more right now. For instance, you can improve your onboarding and offboarding. Likewise, a password manager can also help a lot.
Also, make sure to book your free meeting today!