Over the last decade technology has changed a lot. Although the internet has provided many positive things, risk has increased tremendously. Keeping the users happy is very important but it is the technology departments responsibility to protect the users from themselves.
Over the history of small to medium sized organizations, technology departments have been viewed as a maintenance department. When a computer breaks we call the tech to come fix it. When leadership or users want new technology they buy it and have the technology department make it work. Inherently, users were driving the bus and the tech department saw to their needs with minimal push back.
This approach is no longer sustainable. Anyone that does not evolve will eventually wish they had.
Protecting your organization from cyber risk can be daunting and expensive. Especially if you are still giving your staff what they are “comfortable with” or “used to”.
If you want to reduce the cost and effort to protect your organization, it all starts with a basic methodology. Implementing common sense policies and simple easy to manage technology increases security and reduces cost.
Unfortunately, this will impact your users. Nobody likes change but if you do not change with the times it is much more difficult to reduce risk. Things like multi factor authentication, strong passwords, and a more restrictive environment usually does not make everyone happy.
Executive leadership needs to listen and support the technology department. At the same time the technology department needs to step up and define the right way to do things.
- Standardizing on the same software for everyone.
- Standardizing on a platform and not having Windows, Mac, iOS, and Android. The more platforms the more there is to secure and support. They are all handled differently.
- Not allowing personal devices to be connected to the organization’s network.
When a simplified methodology is implemented properly the users will be safer. If you cater to the wishes of the users and have a cybersecurity breach the first place the finger will get pointed is at the technology department.
