Running Head Human Error In Cyber Security 1bullying6human ✓ Solved

Human error is a proponent at the center of multiple horrific events surrounding Cyber security. As we get more advanced as a civilization, technology becomes more secure and less prone to error. Human error on the other hand is extremely difficult to deal with as human nature intervenes. There’s not a single individual living who will never make mistakes. In reality, making mistakes is at the core the human civilization. It is how we develop and learn. However in cyber security, human mistakes are commonly overlooked. According to a study by IBM, human mistake are the predominant cause of 95% of cyber security breaches. In other words, if human blunder was by one means or another dispensed with completely, 19 out of 20 cyber breaches may not have taken put at all. Studies portray that businesses do have great reason to be stressed around employees contributing to cybersecurity dangers. Staff may make mistakes that put their company’s information or frameworks at danger, either since they are careless and accidently slip up or since they don't have the needed training to instruct them how to act fittingly and to secure the business they work for. Careless or ignorant staff, for illustration, are the second most likely cause of a genuine security breach, second to malware. In expansion, 46% of cybersecurity episodes within the last year, are caused by careless/uninformed staff who contributed to the attacks face by the companies.

Human mistake on the part of staff isn't the only ‘attack vector’ that businesses are falling victim to. Within the last year inner staff have moreover caused security issues through noxious activities of their own, with 30% of security occasions within the final 12 months allegedly including staff working against their own employers. The incident of Snapchat’s security vulnerability from 2016 is one of the most well-known and well documented. Snapchat in 2016 said it was just incomprehensibly sorry for a information breach uncovering payroll data of a few 700 current and previous workers. The cause was an assailant imitating to be the social media company’s CEO Evan Spiegel who deceived an representative into emailing over the data. The Snapchat information wasn't stolen by a coding mastermind who hacked the company's servers utilizing a few obscure imperfection. Instead, it was stolen by an assailant who abused a much easier, more human vulnerability: belief. The aggressor imitating to be Snapchat chief official Evan Spiegel and deceived an representative into emailing over the data, highlights the emphasis on human error causing damage.

According to estimates, 700 current or previous employees had data including their names, Social Security numbers and wage information compromised within the assault. The occurrence highlights one of the greatest challenges for companies battling to ensure delicate data: Even on the off chance that your specialized security is up to date, your individuals may let you down. After the incident, the company apologized to its staffers after the phishing assault deceived the HR representative into giving over finance data. The company made a statement “Needless to say, we responded swiftly and aggressively. Within four hours of this incident, we confirmed that the phishing attack was an isolated incident and reported it to the FBI. We began sorting through which employees – current and past – may have been affected. And we have since contacted the affected employees and have offered them two years of free identity-theft insurance and monitoring.” The organization had damage limitations as none of Snapchat’s client information was given to the scammer. The only influenced parties are the employees, both current and previous, whose data was given over. Snapchat was fortunate within the grand scheme of things. Comparative tricks have gotten far more than a little sum of finance data: one company, Ubiquiti Systems, sent a installment of $46.7 million in June after a spoof email was sent by its supposedly CEO, whereas the Financial Times reports that a total of $2 billion has been lost to comparable tricks within the past two and a half years.

According to Jonathan Sander, the VP of Product Strategy at security software providers Lieberman Software, “The fact that Snapchat got snagged with this shows that being young, cool, and high-tech doesn’t protect you from being a phishing target.” When further asked about how an educated Snapchat employee can fall prey to such an incident, he states "Bad guys are getting so good at phishing that they aren’t just fooling that older relative who calls a grandchild every time they need to print something. Even people born into the internet, apps and the cloud are clicking on bad links. That’s very good news for attackers, in case they were worried that millennials would put them out of the phishing business with their tech savvyness."

Paper For Above Instructions

Human error plays a crucial role in cybersecurity, often more so than technological vulnerabilities. While advancements in technology continuously make systems more secure, human error remains a significant risk factor. This paper aims to explore the issue of human error in cybersecurity, its implications, and strategies for mitigation. Numerous studies indicate that human error is responsible for a substantial percentage of cybersecurity breaches. For instance, research by IBM highlights that human mistakes account for approximately 95% of these breaches (Ahola, 2020). This staggering statistic emphasizes the crucial role that human behavior plays in the security landscape.

One of the most concerning aspects of this issue is that human errors can arise from various sources. Employees may accidentally grant access to sensitive data due to carelessness, or they may lack the necessary training to recognize threats and respond appropriately (The Human Factor in IT Security, 2020). Moreover, external threats can exploit human vulnerabilities, such as phishing attacks where perpetrators deceive individuals into disclosing personal information, as highlighted by the Snapchat incident of 2016.

The Snapchat case presents a notable example where human error directly led to a data breach affecting around 700 employees. In this incident, an attacker impersonated the CEO and managed to trick an HR representative into disclosing sensitive payroll information (Peterson, 2019). This breach is a stark reminder that the human element must not be overlooked in discussions about cybersecurity. Organizations may invest in robust technological defenses; however, they must also recognize that their staff can inadvertently become the weakest link.

Furthermore, the widespread nature of cyber threats emphasizes the urgent need for comprehensive employee training programs. It is estimated that around 46% of cybersecurity incidents in the past year have stemmed from careless or uninformed staff, illustrating a dire need for organizations to tackle human error proactively (The Human Factor in IT Security, 2020). A combination of educational workshops, regular security assessments, and creating a culture of vigilance within organizations can significantly reduce the likelihood of human error leading to successful cyberattacks.

To implement effective training, organizations should focus on educating employees about recognizing phishing attempts, understanding the importance of password security, and the proper protocols for handling sensitive data. Moreover, offering simulations and practical exercises can enhance employee readiness in response to real-world attacks. Ensuring that employees are well-versed in identifying potential risks will empower them to act responsibly and take preventive measures.

Although human error is a considerable obstacle, the narrative surrounding cybersecurity should not only focus on blame. Instead, organizations must foster a culture that encourages open communication and accountability regarding security practices. Employees should feel secure in expressing concerns or admitting mistakes without fearing severe repercussions. This mindset can lead to a collaborative environment where lessons are learned from incidents, ultimately strengthening the organization’s security posture.

In conjunction with training and culture building, organizations must also leverage technology to their advantage. For instance, implementing automated training tools can assist in continually educating employees about emerging threats. Moreover, deploying multifactor authentication and other technological defenses can act as safeguards to offend against potential human errors. Thus, a hybrid approach that marries human and technological resources can create a robust security environment.

In conclusion, human error remains a critical vulnerability in the domain of cybersecurity. As evidenced by the research and case studies discussed, organizations must address this systemic issue head-on through comprehensive training programs, nurturing a culture of responsibility, and integrating technological innovations. Doing so will not only help mitigate the risks associated with human error but also build a more empowered workforce capable of defending against increasing cyber threats.

References

• Ahola, M. (2020). The Role of Human Error in Successful Cyber Security Breaches. Retrieved September 20, 2020, from The Human Factor in IT Security.
• Peterson, A. (2019). The human problem at the heart of Snapchat's employee data breach. Retrieved September 20, 2020, from Los Angeles Times.
• Hern, A. (2016). Snapchat leaks employee pay data after CEO email scam. Retrieved September 20, 2020, from The Guardian.
• The Human Factor in IT Security. (2020). How Employees are Making Businesses Vulnerable from Within. Retrieved September 20, 2020, from The Human Factor in IT Security.
• Times Employees Caused Damaging Data Breaches. (2020). Retrieved September 20, 2020.
• Cybersecurity Ventures. (2023). Cybercrime to Cost the World $10.5 Trillion Annually by 2025. Retrieved from Cybersecurity Ventures.
• Verizon. (2023). Data Breach Investigations Report. Retrieved from Verizon.
• Choo, K. K. R. (2019). The Cybersecurity Workforce: Estimating Future Demand and Addressing the Skills Gap. Retrieved from ACM Transactions on Management Information Systems.
• National Institute of Standards and Technology. (2020). Framework for Improving Critical Infrastructure Cybersecurity. Retrieved from NIST.
• Hoffman, A. (2023). Protecting Your Organization Against Phishing Attacks. Retrieved from Security Magazine.