SecurityBrief Australia - Technology news for CISOs & cybersecurity decision-makers
Story image
Deepfake scams, new attack techniques on the rise
Wed, 12th Jul 2023

With Australians falling victim to scammers with $3.1 billion lost in 2022 alone, it has never been more important to foster a safe IT environment, to ensure safety from targeted cyber scams and attacks, according to Product and Technology.

Workplaces should encourage solid understanding of privacy principles and adopt proactive measures to protect valuable data.  

Damian Grace, Founder, and Executive Director of Product and Technology, says scams are constantly evolving in sophistication, especially with the rise of AI, so ensuring the workplace has a strong understanding of these risks will develop a higher sense of vigilance throughout the team. 

"With new attack techniques, vulnerabilities and threats increasing, staying up to date on cyber security training is crucial to ensure individuals remain informed about the evolving landscape," he says.

"Security awareness and phishing simulation training solutions, such as those available from Phriendly Phishing, enable workplaces to be educated on scams before its too late, in an unobtrusive way. As well as help in understanding the risks associated with not implementing security measures."
 
Grace says workplaces should encourage staff to complete their security training on a regular basis, while not disrupting their day-to-day work.

"Focusing on the risks and importance of protection against cyber threats is an effective way to safeguard the workplace. Workplaces who encourage good security awareness practices to empower individuals cultivate a cyber security conscious culture for the benefit of the whole organisation," he says. 

While discouraging bad cybersecurity practices may seem effective in theory, Grace says it is often more beneficial to focus on positive reinforcement and education. Discouragement can ineffectively convey the importance of cybersecurity. 

"Usually, focusing on something positive such as the quality and quantity of reported phishing emails to the security department is a better option than focusing negatively on clicks."

Adapting to technological changes in the workplace is crucial for protecting assets and data, Grace says. 

"Outdated and repetitive training modules will disengage the workplace, whereas incorporating interactive elements, relevant case studies and simulations will engage and align with the evolving changes in technology," he says.

"Experience the impact a low-admin, stress-free phishing education program such as Phriendly Phishing can have on your workplaces risk portfolio. Phriendly Phishing is an efficient and effective model to develop a more security-minded workforce." 

Grace says safeguarding sensitive information and protecting against cyber threats is only just the beginning when discussing the importance of robust security measures. 

"In today's digital workplace, investing in cyber security pays off in terms of mitigating risks, reducing financial losses and eliminating potential reputational damage," he says.
 
"Other than the human-factor, another way of preventing cyber attacks is ensuring a safe IT environment. An outdated or unpatched IT environment is susceptible to attacks such as malware, ransomware and phishing. 

"By fostering a cyber-safe environment, workplaces can minimise the risk of these attacks and protect against potential disruptions to operations, data loss and financial harm."

Grace says from an outsider's perspective, it is important to foster a safe IT environment as it demonstrates the workplace's commitment to protecting customer information, building trust and maintaining long-term relationships.

"With 95% of all cyber security issues being caused by human error, every workplace regardless of the industry should have strong cyber security measures in place," he says. 

"Educate and empower your workplace to help mitigate reputational and financial loss from cyber attacks. Implementing Phriendly Phishing services provides the awareness and phishing simulation training solutions your workplace needs."