1. Cyber resilience¶
Cyber resilience is an organization’s ability to prepare for, withstand, respond to, and recover from cyber attacks while continuing important operations.
Cyber resilence¶
Focuses on preparing, responding, and recovering¶
Assumes some attacks may succeed¶
Uses backups, incident response plans, recovery processes¶
Goal: Minimize impact and restore operations¶
Cyber protection¶
Focuses on preventing attacks and reducing vulnerabilities.¶
Tries to stop threats before they happen¶
Uses tools like firewalls, antivirus, encryption¶
Goal: Prevent incidents¶
What is one thing you can do to build cyber resilience?¶
One thing I can do is develop strong cybersecurity habits and awareness by:¶
Using multi-factor authentication (MFA)¶
Recognizing phishing emails¶
Reporting suspicious activities¶
Keeping systems updated¶
Following security policies¶
What might get in the way of building cyber resilience?¶
Lack of cybersecurity awareness: Employees may not understand their role in security.¶
Over-reliance on technology: Organizations may believe security tools alone can stop all attacks.¶
Limited resources: Lack of budget, time, or skilled personnel can make resilience difficult.¶
Poor communication: Without clear communication plans, organizations may respond slowly during incidents.¶
Why is cyber resilience an effective response to human-centric vulnerabilities?¶
Cyber resilience is effective because it recognizes that humans can make mistakes and attackers often target people through phishing, social engineering, and deception.¶
Instead of assuming people will never make errors, cyber resilience prepares organizations to:¶
Train employees¶
Detect mistakes quickly¶
Respond effectively¶
Recover from incidents¶
2. Building a Cybersecurity Culture¶
A cybersecurity culture is the values, attitudes, and beliefs that encourage cyber-secure behaviors.¶
What are 2–3 behaviors you would like people to do to help the organization be cyber secure?¶
Recognize and report suspicious emails¶
Employees should carefully check links, attachments, and unusual requests before responding.
Use strong authentication practices¶
Employees should:¶
Use strong passwords¶
Enable MFA¶
Avoid password sharing¶
Protect sensitive information¶
Employees should:¶
Avoid sharing confidential data unnecessarily¶
Store information securely¶
Follow data protection policies¶
What are the values, attitudes, and beliefs that would drive these behaviors?¶
Values:¶
Protecting organizational and customer information is important.¶
Security is everyone’s responsibility, not only the IT department’s responsibility.¶
Attitudes:¶
Be careful and think before clicking links or sharing information.¶
Take security warnings seriously.¶
Beliefs:¶
Cyber attacks can happen to any organization.¶
Small mistakes can create major security problems.¶
Reporting incidents quickly helps reduce damage.¶
What mechanisms can you employ to create these values, attitudes, and beliefs?¶
Cybersecurity Training¶
Regular training helps employees understand threats such as phishing and ransomware.
Leadership Support¶
Managers and executives should demonstrate secure behavior and make cybersecurity a priority.
Communication Plans¶
Regular security updates, reminders, and awareness campaigns reinforce good practices.
Rewards and Recognition¶
Employees who report threats or demonstrate good security behavior should be recognized.
Performance Evaluation¶
Cybersecurity responsibilities can be included in employee evaluations.
3. Human-Centric Security Concerns from GenAI Tools¶
Concern 1: Data Leakage and Privacy Risks¶
a. Why is this a concern? Generative AI tools may store or process information entered by users. Employees may accidentally expose confidential company information by entering sensitive data into public AI tools.
Example:¶
An employee copies a company’s customer database into an AI chatbot to summarize it. The information may expose:
Customer names¶
Financial details¶
Business secrets¶
What behaviors minimize this risk?¶
Employees should:¶
Remove sensitive information before using AI tools.¶
Avoid entering confidential company data into unapproved AI systems.¶
Use only organization-approved AI tools.¶
Consult IT or management before using new AI services.¶
What mechanism can encourage these behaviors?¶
Organizations can use:¶
AI usage policies¶
Data protection training¶
Approved AI tool lists¶
Access controls¶
Monitoring of AI usage¶
Leadership communication about responsible AI use¶
Concern 2: AI Hallucinations and Over-Reliance on AI¶
Why is this a concern? Example¶
Generative AI can produce incorrect or misleading information, known as hallucinations. If people trust AI outputs without checking, they may make wrong decisions.
Example:¶
An employee uses AI to create a cybersecurity report. The AI provides incorrect vulnerability information, and the organization makes poor security decisions based on inaccurate data.