As we become a more and more digitized world, we rely on the security of data and information in order to live. Whether to do our banking, to store health records or education credentials, or even just to do our jobs, securing the data around us has never been more important.
The inevitability of a data breach has been made extremely clear in the United States through several high-profile attacks. In 2017, a nation-state accessed millions of records from the Office of Personnel Management (OPM). Then, hackers hit Equifax, one of the largest credit agencies in the United States; as a result, half the population of the country had their social security numbers, addresses, and credit information hacked.
The reality is that every technology is hackable; one of the most important things to understand in cybersecurity is that there’s no such thing as a silver bullet. If you ever hear about a product or a solution offering previously unheard of levels of security, it’s a scam. So, what can you do about it?
Instead of focusing on protecting yourself from being hacked, the conversation is now about understanding the most likely place you will be hacked and implementing procedures and protocols to be able to identify the hack and recover from it. That’s just risk management. Companies are asking themselves about the most important data they have in the business and who the most likely actors would be who might try to attack them. Starting from risk management allows companies to prioritize where to focus. A business could spend its entire budget on cybersecurity and still be vulnerable. There’s no protection against the most determined adversary.
Starting with the assumption of an inevitable breach, it’s important to understand the different ways that hackers can attack. We passionately believe in teaching everyone how they can hack into, say, a online bank or their own accounts in order to bring to life how important cybersecurity is.
We’ve gone from a world where cybersecurity was a problem for the security team to a world where it’s a problem for everybody in both their personal and professional lives.
It’s about your people and culture. Cultures of fear are no longer tenable, and education plays a bigger and bigger role.