Oxygen Technical Services Ltd

Why are Organizations Slow to Act

So, why don’t businesses or organizations deal with their Cyber Security posture more quickly, or even at all.  It’s startling when just 38% of business owners, or directors reported having a high level of concern about cybersecurity risks, and even a smaller proportion said they were prepared for the risks. 

Furthermore, owners stated, when evaluating their strategic objectives, cyber security was overshadowed by more salient business objectives like attracting and retaining top talent, regulatory challenges, and growing their business. 

This is confirmation that owners just aren’t internalizing the threat of long-term damage an attack would have on their organization.  So why is that? 

Well, there are two main reasons: 

• Businesses lack the processes, tools, to really see what’s going on. 
• And the expertise to evaluate and address cyber threats (take a look at my first presentation and you will see why.) 

So, let’s talk about what business owners, Boards, or any organization can do to embrace that cyber security threats are real and that they need to take ownership of these risks: 

• Raise cyber security related questions – you can start with one, or even all five of my recommendations from my first presentation, but start asking your team, are we protected, how do we know.  Just ask the questions even if the answers aren’t known.   
• Make cyber security, in fact technology as a function, a regular part of your management briefings. 

• Advocate for investments in data security and risk management within the organization.  Ask the simple question, what would it cost us to be down for one hour, for a day, or even a week?  This will help to rationalize the investment.   
• Bring in external cybersecurity experts to be part of your management briefings.  At Oxygen we ask our clients, where tenable, to create a technology committee, with all technology stakeholders to so we can have honest conversations about IT. 

So, the call to action – ask yourself the question, is my organization being open and honest about our cyber security posture.  Are we discussing technology consistently and with intention?  If you aren’t, that’s all right, but it is not all right to be complacent.  As an expert for help and start the conversation.   

If you have any questions on how to implement about what your organization should be doing with technology, just reach out to the Team at Oxygen.