This comprehensive guide focuses on empowering employees to contribute to their organization's cybersecurity posture. It outlines the importance of investing in cybersecurity skills and training, implementing strong security controls, understanding incident response plans, monitoring the work environment for threats, and continuously educating employees about cybersecurity best practices. By fostering a security-conscious workforce and encouraging active participation in cybersecurity efforts, organizations can significantly reduce the risk of cyberattacks and build a more robust and resilient defense against potential breaches.

1. Empowering Employees
for Cyber Resilience
Richard Lawson

2. Empowering Employees for Cyber
Resilience
Cybersecurity is a critical concern for businesses across all sizes and industries as the number and
sophistication of cyberattacks continue to increase. Organizations must adopt a comprehensive
cybersecurity action plan to mitigate the risks associated with potential breaches. Employees play a vital
role in maintaining a strong cybersecurity posture, and understanding their responsibilities is essential
for the organization's overall security.
This guide will explore the di erent aspects of an e ective cybersecurity action plan and highlight
employees' roles in each area. Following the recommendations outlined in this guide, employees can
contribute to a more secure work environment and help protect their organization from cyber threats.
The guide will cover the following key areas:
Investing in Cybersecurity Skills and Training: Ensuring employees have the knowledge and skills
to identify and respond to cyber threats e ectively.
Implementing Strong Security Controls: Familiarizing employees with the security measures to
protect the organization's data and systems and encouraging adherence to established protocols.
Having a Plan for Responding to Incidents: Educating employees on the organization's incident
response plan and their role in e ectively handling a cybersecurity incident.
Monitoring Your Environment for Threats: Encouraging employees to actively monitor their work
environment for potential cybersecurity threats and report any suspicious activity.
Educating Your Employees about Cybersecurity: Highlighting the importance of continuous
education for maintaining a strong cybersecurity posture and providing opportunities for
employees to expand their knowledge.
By following the recommendations outlined in this guide, employees can actively participate in
safeguarding their organization's digital assets and contribute to a more robust and resilient
cybersecurity posture. This proactive approach helps protect the organization from cyberattacks and
fosters a sense of shared responsibility and commitment to the organization's overall security strategy.

3. Empowering Employees for Cyber
Resilience
Employees play a crucial role in maintaining an organization's cybersecurity posture, and ensuring they
are well-trained is essential. Familiarity with cybersecurity best practices and ongoing training helps
employees stay up-to-date with emerging threats and techniques. In addition, companies can invest in
various resources to enhance their employees' cybersecurity skills:
Online courses
Online courses o er a exible and convenient way for employees to learn cybersecurity topics at their
own pace. These courses can cover various topics, from essential cybersecurity awareness to advanced
technical concepts. In addition, many reputable institutions and organizations provide free or paid
online courses on cybersecurity.
In-person training
In-person training sessions provide employees with hands-on experience and the opportunity to
interact with cybersecurity experts. These sessions can be tailored to the organization's needs and may
include workshops, seminars, or conferences. In-person training helps employees build practical skills
and fosters a culture of cybersecurity awareness.
Security awareness programs
Investing in Cybersecurity Skills and Training
Security awareness programs help create a security-conscious work environment. These programs can
include regular newsletters, security bulletins, posters, and other resources highlighting cybersecurity
best practices and recent threats. In addition, employees can stay informed and develop a strong
security mindset by maintaining an ongoing dialogue about cybersecurity.

4. Empowering Employees for Cyber
Resilience
Webinars and workshops
Webinars and workshops provide employees interactive learning opportunities focused on speci c
cybersecurity topics. These events can feature guest speakers, panel discussions, or hands-on activities
to help employees better understand and apply cybersecurity principles. In addition, Webinars can be
recorded and made available for employees who cannot attend live sessions.
Certi cations for IT sta
Certi cations allow IT sta to demonstrate their expertise in speci c cybersecurity domains. Acquiring a
certi cation enhances an employee's knowledge and skills and showcases their commitment to
maintaining a strong cybersecurity posture within the organization. Well-known certi cations include
CompTIA Security+, Certi ed Information Systems Security Professional (CISSP), and Certi ed Ethical
Hacker (CEH).
By investing in these resources, companies can equip their employees with the skills and knowledge
necessary to respond to and mitigate cybersecurity threats e ectively. This investment ultimately
contributes to the overall security and resilience of the organization.

5. Empowering Employees for Cyber
Resilience
Employees must be familiar with the security controls and adhere to established protocols to safeguard
an organization's data and systems. This section delves into various security controls and their
importance in protecting a company's digital assets.
Two-factor authentication (2FA)
Two-factor authentication adds a layer of security to the login process by requiring employees to
provide additional proof of identity, such as a code sent to their mobile device or a biometric identi er.
This makes it more di cult for unauthorized users to access accounts, even with the correct password.
Therefore, employees should enable 2FA for all work-related accounts and applications.
Password managers and strong passwords
A password manager tool securely stores and generates complex, unique passwords for di erent
accounts. Employees should use password managers to create and manage strong, unique passwords
for their work accounts. Strong passwords typically consist of at least 12 characters, including a mix of
upper and lowercase letters, numbers, and special symbols. This reduces the risk of unauthorized
access due to weak or reused passwords.
Regular software updates and patches
Implementing Strong Security Controls
Software updates and patches x vulnerabilities and improve applications' and operating systems'
overall security and functionality. Employees should enable automatic updates for their devices and
applications or regularly check for and install updates manually. Timely updates minimize the risk of
exploitation by cybercriminals who target known vulnerabilities.

6. Empowering Employees for Cyber
Resilience
EmpoweringEmployeesforCyberResilience
Virtual Private Networks (VPNs)
A VPN is a service that encrypts internet tra c and routes it through a secure server, protecting
sensitive data from being intercepted or monitored. Employees should use VPNs from remote locations
or public Wi-Fi networks when connecting to the company network. This ensures a secure connection
and protects sensitive data from potential eavesdroppers.
Limited access to sensitive information
Implementing the principle of least privilege (PoLP) means granting employees access to only the
information and resources necessary for their speci c job functions. This reduces the risk of
unauthorized access, data breaches, and insider threats. However, employees should be aware of the
access levels they have been granted and follow established protocols for requesting additional access
or sharing sensitive information with colleagues.
Employees contribute to their organization's cybersecurity by understanding and adhering to these
security controls. In addition, a strong security culture, supported by e ective controls, also helps
protect the company's data and systems from potential cyber threats.

7. Empowering Employees for Cyber
Resilience
Understanding your organization's incident response plan is essential for dealing with cybersecurity
incidents promptly and e ectively. Familiarizing yourself with the plan's key components allows you to
contribute to the response e ort and minimize the impact of a breach. The following are crucial
elements of an incident response plan:
Clear communication channels for reporting incidents
Employees must know how to report cybersecurity incidents to the appropriate personnel quickly. This
may include contacting an IT helpdesk, a designated security o cer, or a speci c incident response
team. Ensuring all employees know these communication channels and reporting procedures enables
rapid response to potential threats.
De ned roles and responsibilities within the incident response team
An e ective incident response plan assigns clear roles and responsibilities to each team member. This
ensures everyone knows their duties and can act quickly during security incidents. In addition,
employees should be familiar with the roles and responsibilities of the incident response team, even if
they are not directly involved. This understanding helps streamline the response process and facilitates
cooperation between employees and the response team.
Having a Plan for Responding to Incidents

8. Empowering Employees for Cyber
Resilience
Documenting and preserving evidence is vital for understanding the scope of a security incident and
assisting in potential legal or regulatory proceedings. The incident response plan should outline the
procedures for collecting and preserving digital evidence, such as logs, network tra c, and a ected
devices. Employees should know these procedures and when and how to assist in the evidence
preservation process.
Steps for post-incident analysis and improvement
After resolving a cybersecurity incident, it's essential to review the event and identify areas for
improvement. The incident response plan should include guidelines for conducting post-incident
analysis, such as root cause analysis or lessons learned meetings. Employees should participate in these
activities when appropriate and be open to sharing their insights and experiences to help the
organization improve its response capabilities.
By familiarizing themselves with the organization's incident response plan, employees can contribute
e ectively to managing cybersecurity incidents. This understanding minimizes the impact of breaches
and helps the organization recover more swiftly, ultimately strengthening its cybersecurity posture.
A plan for documenting and preserving evidence

9. Empowering Employees for Cyber
Resilience
Reporting suspicious emails, messages, or calls
Phishing attacks, social engineering, and other cyber threats often begin with seemingly innocuous
emails, messages, or phone calls. Therefore, employees should be vigilant in identifying and reporting
any suspicious communication. This includes checking for unusual sender addresses, unexpected
attachments, or requests for sensitive information. Employees should contact their IT or security
department for guidance when in doubt.
Regularly updating antivirus and security software
Antivirus and security software can help detect and block malware, ransomware, and other cyber
threats. Employees should ensure their antivirus software is up-to-date and running regular scans on
their devices. Additionally, if available, employees should enable automatic updates for their security
software or manually check for and install updates as needed.
Employees are often the rst line of defense when detecting cybersecurity threats. They can contribute
to the organization's overall security by actively monitoring their work environment. Here are some
actions employees can take to help identify and mitigate potential threats:
Monitoring Your Environment for Threats

10. Empowering Employees for Cyber
Resilience
External storage devices, such as USB drives and portable hard drives, can be a source of malware
infections if not used cautiously. Employees should avoid using unknown or untrusted external devices
and continuously scan them for malware before opening les. Additionally, employees should follow
their organization's policies for handling and disposing of external storage devices.
Staying informed about current threats and trends
Awareness of cybersecurity threats and trends is essential for proactively identifying potential risks.
Employees can stay informed by subscribing to security newsletters, attending security awareness
training sessions, or participating in relevant webinars and workshops. By staying up-to-date with the
latest threats, employees can better recognize and respond to potential issues in their work
environment.
Employees play a crucial role in identifying and mitigating cybersecurity threats by actively monitoring
their work environment and taking these actions. A vigilant and well-informed workforce is essential to
an organization's security strategy, contributing to a more robust and resilient cybersecurity posture.
Being cautious with external storage devices

11. Empowering Employees for Cyber
Resilience
Attend security awareness training sessions
Organizations should o er employees regular security awareness training sessions, covering topics
such as phishing attacks, social engineering, password management, and data protection. These
sessions can be conducted in various formats, such as in-person workshops, webinars, or online
courses. Employees should be encouraged to attend these training sessions to keep their cybersecurity
knowledge up-to-date.
Engage in phishing simulations and assessments
Phishing simulations are valuable for assessing employees' ability to recognize and respond to
malicious emails. These simulations mimic real-world phishing attacks and provide a safe environment
for employees to practice their skills. Additionally, by participating in phishing simulations and
assessments, employees can identify areas for improvement and learn how to avoid falling victim to
actual phishing attacks.
Ongoing education is crucial for maintaining a strong cybersecurity posture within an organization.
Employees must be well-versed in best practices and current threats to e ectively protect the
organization's digital assets. Here are some ways to encourage employees to stay informed and
engaged in cybersecurity education:
Educating Your Employees about Cybersecurity

12. Empowering Employees for Cyber
Resilience
Security awareness campaigns are initiatives designed to promote a security-conscious culture within
the organization. These campaigns may include newsletters, posters, videos, or interactive activities
highlighting essential cybersecurity topics. Employees should be encouraged to participate in these
campaigns and apply the knowledge gained to their daily work routines.
Share knowledge and insights with colleagues
Encouraging a culture of knowledge-sharing and collaboration is vital for maintaining a strong
cybersecurity posture. Employees should be encouraged to share their cybersecurity knowledge,
experiences, and insights with colleagues, fostering a sense of shared responsibility for the
organization's security. This can be achieved through informal conversations, team meetings, or
dedicated knowledge-sharing events, such as brown bag lunches or seminars.
By providing employees with continuous education and promoting a security-conscious culture,
organizations can empower their workforce to make informed cybersecurity decisions. This helps
protect the organization's digital assets and fosters a sense of shared responsibility for the
organization's overall security posture.
Participate in security awareness campaigns

13. Empowering Employees for Cyber
Resilience
A comprehensive and robust cybersecurity action plan is essential to protect organizations from the
growing threat of cyberattacks. By investing in skills and training, implementing strong security
controls, understanding and following incident response plans, actively monitoring for threats, and
continuously educating employees, businesses can signi cantly reduce their risk of falling victim to
cybercriminals. Employees play a vital role in maintaining a strong cybersecurity posture, and their
active participation is crucial for the organization's overall security.
Empowering employees to contribute to their organization's security strategy involves the following:
Providing access to resources and training that keep employees up-to-date with the latest
cybersecurity best practices, threats, and trends.
Ensuring that employees understand the security controls and follow established protocols to
protect sensitive data and systems.
Communicating the organization's incident response plan to employees, clarifying their roles and
responsibilities during a cybersecurity incident, and encouraging prompt reporting of potential
breaches.
Fostering a culture of vigilance and active threat monitoring, employees are encouraged to report
suspicious activities and stay informed about current risks.
Creating an environment prioritizing continuous learning and knowledge-sharing empowers
employees to stay current with cybersecurity developments and share insights with colleagues.
Final Thoughts
By focusing on these aspects, organizations can cultivate a security-conscious workforce better
equipped to protect their digital assets and respond e ectively to cyber threats. Employees'
commitment to maintaining a strong cybersecurity posture is an invaluable asset for organizations.
Fostering a sense of shared responsibility for security will ultimately contribute to a more robust and
resilient defense against cyberattacks.