{"id":133677,"date":"2020-05-25T18:16:49","date_gmt":"2020-05-25T16:16:49","guid":{"rendered":"https:\/\/gamestrategies.io\/blog\/how-to-use-training-to-tackle-company-cybersecurity\/"},"modified":"2024-11-01T17:17:08","modified_gmt":"2024-11-01T16:17:08","slug":"how-to-use-training-to-tackle-company-cybersecurity","status":"publish","type":"post","link":"https:\/\/gamestrategies.io\/en\/blog\/how-to-use-training-to-tackle-company-cybersecurity\/","title":{"rendered":"How to use training to tackle company cybersecurity"},"content":{"rendered":"

The idea that the responsibility for computer security falls squarely on the shoulders of a company\u2019s IT department<\/a>, or on its top manager or CTO, is commonplace. On its face, it makes sense — these people are the ones with the technical know-how to counter attacks and maintain security.<\/span><\/p>\n

However, in practice, while these roles may be able to contain attacks, they don\u2019t have the necessary resources or reach to prevent them. This falls on everyone’s shoulders equally. Everyone needs to be on the same page and working together.<\/span><\/p>\n

All businesses need to be ready to take on any cyberattack that may come their way. The threat is constant and all organizations need to know how to counter it. Attacks can affect companies of any size and happen anywhere in the world. For example, Telefonica was hit in 2017, and it affected the worldwide market; but it can also hit more local companies like PRISA or Everis in Spain, for example, which were attacked with ransomware and had all their files held hostage.<\/span><\/p>\n

At Formadores IT<\/a>, we understand how important it is to give Training and HR departments the tools and know-how to implement a comprehensive prevention plan<\/a>. Ours, for example, works in four phases:<\/span><\/p>\n

\u00a01. <\/span>Evaluation and measurement<\/span><\/h2>\n

In the initial phase, the focus should be on measuring the organization\u2019s risk of attack. This means drawing up a plan that\u2019s agreed upon by the IT and Training departments, as well as approved by Management, whose primary interest is regulatory compliance. This way, everyone working together can construct an in-depth assessment of the status of the organization’s computer security.<\/span><\/p>\n

To do this, a few initial evaluations must be carried out taking the most common risks into account. Such evaluations include:\u00a0<\/span><\/p>\n