From family-run businesses to Fortune 500 companies, knowing internet safety protocols to keep data secure is critical.
As we celebrate Safer Internet Day on February 8, it’s more important than ever to ensure everyone in every company understands the risk our digital platforms pose.
It’s no secret that cybercrime can seriously harm any organization, causing significant damage to its reputation and bottom line.
The pandemic significantly changed businesses in Washington and around the world. One of the changes was the need for employers to establish more robust digital access to their files, both for employees and customers, creating a more pronounced cybersecurity threat for all businesses.
In light of the quick move to a digital footprint, a top cybersecurity expert warns that data snoops are busier than ever, and now is the time to check the locks on every digital door that leads to business and customer records.
“There’s a general rule for businesses of any size: if you don’t think about internet security and potential cybersecurity, you’re at risk,” said Dr. Andre Alfred. “The time to take precautions to protect your data is before a breach occurs.”
Alfred is the Partner Group Program Manager for the Cloud + AI Security Division at Microsoft Corporation. He believes the need for organizations to protect their data is more crucial than ever, and that a strong defense against cyberattacks starts with the right mindset.
“Just as families lock their doors and secure their windows to protect their belongings, businesses must do the same when it comes to cybersecurity,” Alfred said. “As we move more of our daily services and activities online, employers must consider cybersecurity in the same way they consider the physical security of their property and belongings.”
Alfred said companies also need to look beyond their own walls and consider the security measures of the organizations with which they work.
“The entire chain must be secure,” Alfred explained. “Understanding your cybersecurity posture as an employer, as well as that of the people you do business with, is critical today, especially since everything has rapidly moved online over the past year.”
Once a company prioritizes data protection, Alfred suggests a set of cybersecurity measures for employers and anyone with a digital footprint:
- Educate employees: The leading cause of security and data breaches is email phishing campaigns, which consist of seemingly harmless emails targeting employees. Because these emails appear “safe,” an employee who clicks on a link may inadvertently leak their credentials. If your company doesn’t have a cybersecurity awareness program for employees, you should create one as soon as possible.
- Keep IT security patches up to date: If you have IT in your business, make sure to have a program that ensures patching and security updates are installed on a regular basis. If you hire an outside firm to handle IT and security patches and updates, be sure to revisit the timing and schedule often to ensure all the latest patches are installed in a timely manner.
- Bring in an expert: At a minimum, there should be some regular assessment of IT security within the business. Depending on the size of the business and the current cybersecurity posture, hiring an outside firm to come in and look at the features already in place and assess whether any breaches have already taken place is a good step to get a baseline for where the company stands and any improvements that can be made.
- Check vendor digital security measures: If the business hires out for functions like payroll or other services, always have the vendor supply their cybersecurity protocols to ensure your private information remains private. Vendors should be able to prove this information to their customers through the purchasing process or whenever it is requested.
Alfred also recommends that organizations, if possible, insource their IT operations, although he acknowledges that there aren’t enough trained and qualified cybersecurity professionals to meet the demand.
That’s why he created the Sheila Guillory Memorial Scholarship at Western Governors University (WGU) in Washington, where he earned a bachelor’s degree in IT Management and serves on the advisory board. He created this scholarship in honor of his late aunt to make the cost of a degree from WGU Washington even more affordable and to encourage more people to consider careers in IT and cybersecurity.
“I encourage anyone thinking about entering the growing field of cybersecurity to do so,” Alfred said. “Companies will need everyone’s collaboration to ensure the security and protection of sensitive data.”
Dr. Andre Alfred is a Partner Group Program Manager in the Security, Compliance, Identity, and Management (SCIM) Division at Microsoft Corporation. In his role, he is responsible for Cybersecurity Initiatives and Governance for many of Microsoft’s Cloud Services.
