Security Awareness in a Tech Workforce: The Human Element – Part 1

168 7 min 0

Pointing out how the human element remains critical in a tech organization’s cybersecurity framework, the Techronicler team asked security experts and tech business leaders to share one specific initiative they implement to foster a sense of security awareness in a tech workforce.

Our team received some great opinions in response and we now share the most insightful among these with you!

Don’t forget to read the other articles in this series:

Security Awareness in a Tech Workforce: The Human Element – Part 2

Security Awareness in a Tech Workforce: The Human Element – Part 3

Read on

Umair Majeed

Cybersecurity is a top priority for my organization. One initiative we implemented is mandatory cybersecurity awareness training for all employees.

We conduct simulated phishing tests and retrain anyone who clicks malicious links. We also have an open reporting policy where staff can report anything suspicious, like strange messages or network activity. We investigate all reports and use them as teaching opportunities.

Promoting vigilance and open communication has created a shared responsibility for security. While technology is crucial, people are the first line of defense.

With proper education and culture, humans become an organization’s greatest cyber asset.

Datics AI also sponsors local tech events to spread awareness. When people see us supporting the community, they become more open to learning about cyber risks and how to avoid them. Over time, strengthening our brand locally has also increased our customer base by over 20% as people come to recognize and trust us.

Community outreach, education, and nurturing a “see something, say something” mentality have been the keys to boosting Datics AI’s cybersecurity. Technology and awareness together build the strongest defense. Our initiatives show that the human factor plays a vital role in any organization’s security framework.

Umair Majeed

CEO, Datics AI

Pavel Buyeu

A year ago, I worked in an IT holding, where one of the companies was engaged in processing payments (payment gateway). It was hacked through an employee. Fraudsters through the social network LinkedIn offered him a salary 3 times higher and asked him to fill out a form on their website before the interview. The form contained malware that gained access to the employee’s computer. In the company, this employee was a tech lead with a high level of access to the system. This led to a large theft of money. After this, the holding greatly strengthened cybersecurity measures for critical infrastructure.

Pavel Buyeu
Co-founder, LocalProBook

David Parker

In the modern digital era, where digital-led businesses are left vulnerable due to malware attacks that can affect internal and confidential data and can be a cause of huge identity theft and data loss.

Network security: Your network is always on the stake when it is not protected with the required updates and if there are any loopholes from which any attacker can easily intervene, a cyber security specialist will try to identify it with rigorous testing to stop the attack from prevailing.

Information security: A strong policy has to be implemented to prevent a loss of confidential data that negatively affects the company’s integrity and the consequences can lead to heavy losses incurred that can easily be avoided by awareness regarding the importance of cyber theft.

David Parker
Content Manager, Web Design Dubai

Gyan Chawdhary

One effective initiative to foster security awareness in a tech workforce is to implement ongoing, interactive cybersecurity training tailored to real-world scenarios. This shouldn’t just be the typical annual compliance exercise, but a dynamic, engaging experience that keeps evolving with emerging threats. For example, organizing monthly “phishing simulation exercises” can help employees identify malicious emails, testing them in a safe environment. These exercises, followed by immediate feedback and tips, reinforce the importance of vigilance in day-to-day tasks.

You could also gamify the learning process by creating friendly competitions or awarding badges for milestones reached in security best practices.

The goal is to make security a personal responsibility for everyone, not just the IT department.

By embedding security awareness into daily routines, employees become the first line of defense, ensuring that they recognize and respond quickly to threats, protecting both the organization and themselves from cyberattacks.

Gyan Chawdhary

Founder & CEO, Kontra

Raden Setyo

To foster security awareness in a tech workforce consider implementing regular and interactive training sessions. For example, conducting quarterly “phishing simulation” exercises can be extremely beneficial. Such simulations involve sending simulated phishing emails to employees to test their ability to recognize and report suspicious activities.

After the exercise the employees get detailed feedback and educational resources to better their understanding of tactics used in the test and improve their response to such emails.

Such an approach not only reinforces the importance of vigilance but also helps employees develop practical skills to identify and mitigate potential threats. Best of all is that such practices build a culture of security awareness over time.

Raden Setyo
Digital Media Publisher, Slotozilla

Ellie Gibson

Negligence is the main human threat to cybersecurity – two in three “insider” security attacks happen as a result of negligence from employees.

To combat carelessness in cybersecurity, consider a positive reinforcement program.

Offer rewards such as gift cards or workplace benefits for:

Reporting possible cybersecurity leaks (including potential negligence)
Following the cybersecurity strategy set out by the company
Identifying potential attacks such as phishing and sending them on.

By promising reward for being diligent with cybersecurity, you ensure that your employees are far less likely to be negligent and careless with cybersecurity.

Ellie Gibson
Marketing Manager, Titan Security Europe

Bill Mann

Regular cybersecurity L&D for employees is crucial to keep networks secure. The vast majority of breaches are through phishing tactics, social engineering. But when organizations keep this at the front of every employee’s mind through regular education, phishing communications are turned over to the security team immediately, rather than taking the requested action. Employees must be kept aware that any communication that requires an unusual action, even from a trusted source, should be turned over to the security team. Especially if it elicits an emotional reaction and asks for immediate action.

Bill Mann
Privacy Expert, Cyber Insider

Mary Zhang

At DtglInfra, we implemented a “Cybersecurity Champion” program to foster security awareness among our tech workforce. This initiative designates one team member from each department as a security advocate, responsible for promoting best practices and serving as a liaison with the IT security team.

Champions receive specialized training and are tasked with conducting monthly “security huddles” within their departments. These brief, informal sessions cover recent threats, share security tips, and discuss real-world scenarios relevant to their team’s work.

The program has been remarkably effective

We've seen a 60% reduction in successful phishing attempts and a 40% increase in reported security concerns.

Employees feel more comfortable discussing security issues with their champion, leading to faster identification and resolution of potential vulnerabilities.

One unexpected benefit has been the cross-pollination of ideas between departments. For instance, our marketing team’s champion suggested gamifying security training, an idea now implemented company-wide, boosting participation in security initiatives by 75%.

This peer-to-peer approach has transformed cybersecurity from an IT-only concern to a shared responsibility, significantly strengthening our overall security posture.

Mary Zhang
Head of Marketing and Finance, Dtgl Infra

Siri Varma Vegiraju

I developed a Security Health Dashboard for the organization, which provides an overall security score for each team based on telemetry data from their resources. The dashboard identifies key areas for improvement and presents actionable recommendations to strengthen security posture.

For example, one recommendation might be to avoid using connection strings when communicating with databases or other cloud resources, and instead adopt Managed Identity. Based on the number of resources and associated risk factors, a security score is generated. Teams are then required to transition their resources to Managed Identity to improve their score.

By reviewing the dashboard during organizational-level meetings, teams are held accountable for maintaining an upward trend in their security health, ensuring continuous improvement.

Siri Varma Vegiraju
Tech Lead

The Techronicler team thanks these experts and business leaders for taking the time to share these valuable tips on security awareness in a tech workforce.

Connected Posts:

Security Awareness in a Tech Workforce: The Human Element – Part 2
Security Awareness in a Tech Workforce: The Human Element – Part 3

If you wish to showcase your experience and expertise, participate in industry-leading discussions, and add visibility and impact to your personal brand and business, get in touch with the Techronicler team to feature in our fast-growing publication.

outreach@techronicler.com

Email