Helping employees understand threats at a personal level is a good step toward heightened awareness

Many business leaders and human resources professionals believe that cybersecurity is the responsibility of their information technology staff and managed services provider.

However, ensuring that employees and their families have appropriate cybersecurity protection is an employee benefit that benefits employers as well.

Mistakes, lack of awareness and general vulnerability of employees remains the most significant cybersecurity risk for most employers. Simply training employees about cyber threats typically fails to reduce that risk sufficiently. To have a cyber-mature workforce, employers need to engage employees in cybersecurity by teaching employees about the threats to themselves and their families, and making personal protection services available to them.

Training

Cybersecurity training is not most people’s idea of a good time. However, employees sit up and take notice when trainers talk to them about the prevalence and severity of the cyber threats to themselves, including their identities, credit files, financial accounts, personal devices and home networks. Explaining that their parents and children face these same threats never fails to get employees meaningfully engaged. Employers can then translate that personal engagement into an increased awareness and commitment to the policies and practices that protect the business.

The following are a few training opportunities that motivate employees: taking control of your credit bureau accounts, extinguishing fraudulent or unnecessary credit and freezing or locking your credit; obtaining identity, credit and financial crime protection for yourself and your family; ensuring that your personal financial accounts are secure from theft; hardening your home network and online accounts; and ensuring the online safety of yourself and your family members.

Cyber crime protection

Employers seeking a deeper and longerlasting engagement from employees also offer certain personal protection services as an employee benefit. By doing so, employers demonstrate that they have the same level of commitment to their employees’ personal cyber welfare, as they are asking from those employees with respect to the cybersecurity of the business.

These benefits include either a fully or partially paid subscription to a third-party service that monitors the credit bureaus, internet, dark web and other online resources for theft or misuse of the identity of the employee and his or her family members, and fraud specialists to restore an individual’s credit and identity in the event of theft or misuse. Such a subscription also can include reimbursement for funds stolen as a result of cyber scams.

Employers are finding that these services are being offered by their existing employee benefits providers as extensions of other benefits, such as health insurance. Employers also can secure subscription services directly from the third-party providers at discounted rates for their employees.

Accounts and networks

Employers also benefit from making other safeguards available to help employees protect their home networks and their personal email, social media, financial and other online accounts. The work-from-home model highlights the threats to employers of employees accessing business systems from insecure residential and public Wi-Fi networks. The insecurity of personal accounts are common points of entry for hackers to exploit to access business systems through employee devices.

To mitigate these risks, employers are helping employees with residential firewalls, personal virtual private networks and password management applications for their households. Many employers are realizing that these safeguards are important for business owners, executives and other management employees who have remote access to financial, personnel and other sensitive information.

For a business to reduce its vulnerability to cyberattacks, it must engage its employees by empowering them to protect themselves, then translate that engagement into a heightened awareness and mutual commitment to protect the business as well.

Cam Shilling, founder and chair of McLane Middleton’s Cybersecurity and Privacy Practice Group, assists businesses and private clients in improving their information privacy and security protections.