{"id":28469,"date":"2019-02-04T03:08:21","date_gmt":"2019-02-04T03:08:21","guid":{"rendered":"https:\/\/www.legalgeek.co\/?p=28469"},"modified":"2019-02-04T03:08:21","modified_gmt":"2019-02-04T03:08:21","slug":"5-things-you-need-to-know-about-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.legalgeek.co\/5-things-you-need-to-know-about-cybersecurity\/","title":{"rendered":"5 things you need to know about Cybersecurity"},"content":{"rendered":"

This article was originally published in the 2018 Legal Geek Conference Magazine in October.\u00a0<\/em><\/span><\/p>\n

\"\"With data breaches becoming more common, cybersecurity is as important as locking the door of\u00a0<\/span>the office. CenturyLink\u2019s Solutions Architecture and Security Director EMEA, Bryn Norton<\/strong>, believes effective cybersecurity isn\u2019t just about building ever-more intelligent anti-malware software, it\u2019s about empowering people to take responsibility.<\/p>\n

1. What\u2019s the biggest cyber threat to big law firms?<\/b><\/h2>\n

\u201cComplacency. In 2017, the majority of security breaches were executed against vulnerabilities that were already known to the industry well before the breach. It\u2019s a mindset of \u2018I have bought a device, I have plugged it in and therefore I am now safe\u2019 \u2013 but it\u2019s not as simple as that. You need to be cognisant of how to use it properly and how to maintain it. The WannaCry hack in 2017<\/a> demonstrates how many organisations are not adhering to very basic security measures. Two months prior to WannaCry, Microsoft released a critical patch to address the specific vulnerability, but many companies still hadn\u2019t deployed the patch and were left vulnerable. What that highlights is that people aren\u2019t always doing the basics well.\u201d<\/span><\/p>\n

\"\"

The CenturyLink stand at the Legal Geek Conference 2018.<\/em><\/p><\/div>\n

2. What is the greatest misconception about cybersecurity?<\/b><\/h2>\n

\u201cThat people don\u2019t play a big role when it comes to cybersecurity, because nothing could be further from the truth. People are the weakest link in any organisation’s cybersecurity system, and therefore they are the most important. When you apply security controls to a company, you need to take employees on that journey with you. It\u2019s the responsibility of the organisation to empower staff to execute effective cybersecurity.<\/span><\/p>\n

\u201cIn addition, what a lot of organisations do is buy technology and then think about making it secure \u2013 as an afterthought. But the market place is changing and GDPR is having a positive effect. For example, Article 25 shifts the emphasis to security by design, which is how every security structure should be deployed.\u201d<\/span><\/p>\n