Technology
Delivering an Effective
STRATEGY
C
ybersecurity continues to be a major challenge for companies across the UK with as many as four in ten business-
es (39%) reporting cyber security breaches or attacks in the last 12 months. Whilst many have struggled with security issues for decades, the COVID-19 pandemic has compounded such problems. The shift to remote working has made company devices and critical business activity vulnerable to unsecure home networks which exist outside of the scope of traditional security operations teams. This has resulted in many IT teams struggling to safeguard their data and adjust their security practices over the last year.
14
Whilst many saw the pandemic as a catalytic moment for digital transformation, there’s no reason why the same can’t be said for cybersecurity. However if companies are going to revolutionise their security practices, they must rethink the way security is communicated across the business. Here are three vital components that make up an effective cybersecurity strategy in 2021. Sync cybersecurity with strategic goals A successful cybersecurity strategy should be in sync with a company’s strategic goals and must avoid hindering business performance or productivity. Historically, cybersecurity measures have made it harder for employees to carry out their day-to-day operations, with restrictions in place that strangle operational effectiveness. However, if cybersecurity measures restrict workflow this will lead to frustration among employees and limit the amount of staff adhering to necessary security procedures and even driving them
to circumvent security controls. Cybersecurity must also act as an enabler to the overriding strategic aims of the business, rather than setting the agenda itself. Rather than focusing on security first, start outlining the digital objectives of the company and then layer these with security measures that safeguard company data and information. In other words, companies should start with what they wish to achieve and then the security measures will become clear afterwards. Furthermore, serious problems can arise when information security teams aren’t included in the design of solutions. Without continued communication and collaboration, information security teams can be blindsided with potential security risks that they have no choice but to isolate and secure. This creates the reputation that the information security team is the ‘big bad wolf’, rejecting digital initiatives and arbitrarily enforcing roadblocks that hinder progress. In reality, if information security
