Escape the Echo Chamber: Educating End-Users and Non-Security People

July 7th 2015  by Tripwire Guest Authors
 
 http://www.tripwire.com/state-of-security/wp-content/uploads/cache//lock/2400586754.png 
You have secured every server, patched every bit of software, risk teams have vetted and locked down 10,000+ third-party applications, and a personal victory was won with the addition of the new canine unit added to the corporate campus lobby. Impossibly though, the news is reporting that your business assets have been exfiltrated to several competitive nations. Impossible… until you hear about a user who clicked on a link and installed some rootkit onto their machine. The rest is history.
 
Sound familiar? We in the industry hear this type of tale all too often. As much as we would love to say, “the Russians did it!” and accept empathy – the majority of these cases are the result of human error (patching a system, users clicking links). The challenge is that we are not focusing on the one asset of the company that hasn’t been secured: the user.
 
Full Article