Tools in the Toolbox: Three Tools Consultants Should Know

As the number of large-scale cyberattacks increases each year, preventing and responding to such attacks is becoming increasingly difficult. Hackers constantly develop new techniques to attack secure networks. Major network breaches to the Office of Personnel Management, Sony, Target, and other organizations highlight the need for an increased emphasis on corporate cybersecurity.

Individual employees who have poor cybersecurity etiquette are most vulnerable to security breaches. This is typically due to insufficient training, which is exacerbated by a lack of universal standards for corporate cybersecurity. Arc Aspicio and other companies that serve the Department of Homeland Security (DHS) must be models for improving cybersecurity in the private sector by producing universally applicable corporate security plans to identify and mitigate threats before they occur. These companies also must provide regular employee training to teach employees how to prevent and respond to threats.

Arc Aspicio implemented a company cybersecurity plan in January 2015, which is derived from best practices defined by the National Institute of Standards and Technology (NIST) Framework. The plan outlines the formal roles and responsibilities of company personnel to safeguard both company and Government information and technology. For example, sensitive data are compartmentalized in secure company databases, and employees only have access to areas that are necessary to fulfill their duties.

Arc Aspicio’s annual employee security training teaches personnel how to prevent and mitigate potential threats, whether they come from hackers, foreign intelligence agents, or disgruntled insiders. Employees learn to recognize threat indicators and attempts to elicit sensitive information. Security training also teaches employees best practices for computer security, how to manage one’s online presence, and how and when to report threats.

As cyberattacks become more prevalent each year, companies that serve DHS must implement strong cybersecurity protocols. Developing standardized cybersecurity plans and training employees on cybersecurity policies and procedures are some of the most effective ways to prevent and respond to security breaches.