Security News > 2022 > July > People are the primary attack vector around the world

"People have become the primary attack vector for cyber-attackers around the world," said Lance Spitzner, SANS Security Awareness Director.

"Awareness programs enable security teams to effectively manage their human risk by changing how people think about cybersecurity and help them exhibit secure behaviors, from the Board of Directors on down," said Spitzner.

Key findings Workforce: More than 69% of security awareness professionals are spending less than half their time on security awareness.

This difference is because people dedicated part-time to security awareness have their compensation based on their other responsibilities, which are usually more technically focused.

In North America, the higher the maturity level of an organization's security awareness program, the higher the salary for the awareness professionals who work there.

Action items to increase team size: Documenting and contrasting how many people on the security team are focused on technology versus how many on the team are focused on human risk, creating a document to explain personnel needs fully, and developing partnerships with key departments that can help develop ways to communicate the program's value were recommended.

News URL

https://www.helpnetsecurity.com/2022/07/05/people-primary-attack-vector/