We live in a world full of constantly evolving technology. As risk managers, it’s important that we also evolve with the growing technology and the cyber risks that accompany it. Just as your church has a seasonal maintenance schedule, it’s important to maintain your cyber security on a routine basis as well.
Risk Management Trends for Cybersecurity in 2016
Cyber attacks will continue to become more and more sophisticated. As organizations develop new security mechanisms, cybercriminals are cultivating innovative techniques to bypass them. That’s why our approach must be proactive instead of reactive.Adventist Risk Management is implementing an Employee Awareness Program (EAP) designed to educate our team members on potential cyber risks, how to properly respond to phishing emails, social engineering attempts, and various other threats to company security.
“We need to prepare for tomorrow’s risks instead of focusing on yesterday’s.”It’s important for our schools to stay up-to-date on all cybersecurity measures. Schools collect all types of student data, including attendance, contact information, and medical history. This data is typically stored on the school’s local networks. These systems are often well-known to have a weak or non-existent security system. Cybercriminals are well aware of this and will attack organizations such as schools to gain access to personal information.
Churches also collect various data from its members including names, date of birth, residential addresses, telephone numbers, and more. The church may often have a database that also collects information from online payments through the use of credit or debit cards.
What can my church or school do to manage cyber risks and prevent threats?
First, educate church and school leaders on the information and technology used for all operations. This will allow your leaders to make an effective plan on how to secure it.Implement security measures such as antivirus systems. Remember, if a virus penetrates the network and system, it could result in loss and corruption of data. Once installed, ensure your antivirus systems are routinely kept up-to- date.
Schools need to identify their “critical” data and make sure there is a security plan in place to maintain data integrity and confidentiality. Consider deactivating certain functions, such as geo-tagging photos and publishing names on social media to keep children safe. Churches should limit their network, social media, and website access to an authorized church member. This will limit the risk of any critical information being leaked and make handling any cyber attack a smoother process.
For more information on cyber risks, check out ARM’s Cyber Liability info sheet.