Sometimes, it may seem that some recommendations are heavy, repetitive and unnecessary. Because, of course, we already know it, we are warned and, moreover, it should not happen to us. However, reality is very stubborn. And those of us who spend a good part of our professional activity warning about all that, end up proving ourselves right over time.
We have often talked about information security policies in companies, good practices and those that we should eradicate within the organization. Too many times? It seems that there are few, because as has been recently made public, cybercrime continues to grow and it is now more likely to suffer a virtual crime than in physical reality.
Criminals see it more feasible to profit from a computer attack or an online scam than from a “traditional” theft. You don’t have to show your face and do it massively, you just have to wait for someone to fall for the trap. In addition, these crimes are not always reported and so it is difficult to prosecute. They have increased to a 40%.
Let's go back to the beginning. Are we sure that this cannot happen to our company? Then, perhaps we should consider two courses of action. On the one hand, implement a data security action plan, to prevent external access to critical information. This would involve reviewing procedures, protocols, hardware and software, for example. On the other hand, and no less important, train your own team. Know the risks, identify them, know how to act in the event of a possible threat, responsibly manage access to information, have a code of conduct... there can always be human error that triggers a security crisis, but with the knowledge to know what risk situations can occur and how to act in each case, it is more likely to avoid the threat of a problem. False statements from banks or suppliers, strange requests to provide certain data from supply contracts or irrevocable offers should make us raise the alert.
This training is as valuable in the professional and personal environment. It goes without saying that we are facing a season of very high online commercial activity. Christmas shopping days, Black Friday, Cyber Monday, sales... and it is not a dish of good taste for anyone to see that that fantastic purchase on that website that seemed so original never arrives at home despite the charge deducted from the bank account.