Creating an effective cyber security culture in regulated financial services companies

Technology-based protections are making businesses more resilient to cyberattacks. However, the rapidly improving ability for bad actors to mimic real customers and contacts across multiple vectors highlights the important role a company’s employees must play in protecting against a wide range of threats. It is not enough for staff to simply rely on robust password hygiene and the ability to spot relatively obvious inconsistencies in the approaches they attract. Today’s businesses need to make cyber security a core part of the culture of their companies so that continuous vigilance becomes an operational default. Of course, changing an existing culture is no easy undertaking. This paper analyses the issues facing one financial services business and explores step-by-step what the company did to establish and reinforce a culture of security. This article is also included in The Business & Management Collection which can be accessed at https://hstalks.com/business/.