Abstract

Cybersecurity can be defined as all means that are used to protect or guide programs, system or even a set of connections against digital attacks. The main objectives of cyber attacks are, changing and accessing information, interrupting normal business processes, extorting money from users or destroying delicate information. Everyone has to implement effective cybersecurity measures because the challenging issue today is that it appears that the number of devices are more than people, and attackers tend now to be more creative. Hence, it is vital that individuals and companies need to receive the right education and training so that they can be able to protect their data. Second, it is critical to understand the possible vulnerabilities of cyber-attack. Third, it is good to recognize the ways of controlling physical access insecurity. It is also advisable to have ideas where the best education and training is available, and people should start anticipating the future of cyber.  

Keywords: cybersecurity, attackers, proper education and training, physical access, future of cyber.

The Importance of Cybersecurity Education and Training

Cybersecurity refers to all means that are used to protect or guide programs, system or even a set of connections against digital attacks (Powner, 2011).  The main objectives of cyber-attacks are, changing and accessing information, interrupting normal business processes, extorting money from users or destroying delicate information. Everyone has to implement effective cybersecurity measures because the challenging issue today is that it appears that the number of devices are more than people, and attackers tend now to be more creative. Therefore, due to the dependency on advancements of technology, the increase in daily crimes and severe exposed risks from lack of security, it is vital that individuals and corporations receive proper education and training to have better overall protection of the organization.

Importance of Cybersecurity Education and Training

Cybersecurity knowledge should be of concern in any organization. The significance of this knowledge is to reduce exposure to cybersecurity-related risks (Shoemaker, Conklin, 2011). First, it helps to decrease costs is caused by both the lower frequency of cyber-related loss-incidents and the repercussion of those incidents. Secondly, it helps to reduce costs associated with cybersecurity insurance premiums. Thirdly, it saves time since many people post cybersecurity incidents online and it is easier for one to learn more and avoid issues that can bring them troubles. Besides, cybersecurity helps organizations to know how to market their products online and prevent or limit cases of frauds (Kostopoulos, 2012. Without education, organizations might end up losing important data which can result in its closure.

Exposed Risks

Listing of Possible Vulnerabilities

The first possible vulnerabilities in cybersecurity are the employees. They are among the top threats, sometimes more than hackers. This is because it is straightforward for them to access or attain data from their workplaces. The unhappy employees can also take or sell devices and physical data to the outsiders or company enemies(Manky, 2010).  The second is vulnerabilities are unsecured mobile devices. When mobile devices are in use it is hard to maintain a high level of security around one’s business especially when one is not using, the policy of ‘Bring Your Own Device (BYOD).’ Furthermore, employees still use their gadgets in work-related issues meaning they have less control over their passwords, security threat, and downloading application which could cause security threats.

The third one is, cloud storage applications, putting applications and data on the cloud is advantageous because it grants one to enter data from anywhere using multiple devices. However, if one does not use security caution, hackers will get chances to attack. The fourth one is third-party service providers; most cloud storage companies are the only category of third-party service providers. Due to convinces and cost they likely offer multiple third-party services. However, problems will start arising when their systems fail and are not secure because they will get access to all people’s private data. For example, if one uses a third-party accounting software, hackers could enter the system and access the financial records. (Kotsiopoulos, 2012)All this will be easy when the providers use fewer security methods, such as the use of a default password for every person’s account. The last but not list is, malicious attacks, people become vulnerable when they download malware, and therefore hackers will use this advantage to attain one’s data. Mostly, it is unintentional because people click suspicious links in their servers and also having old systems will increase your risk of malicious attacks.

Controlling Physical Access

Physical security protects companies, sites, information, premises buildings, facilities, people, and other assets and an essential part of protecting them, integrity, confidentiality, and availability of resources (NetScreen Technologies Inc., n.d). It is crucial to improving physical security to secure infrastructure, critical resources, and systems effectively. The categories of physical control; first, preventative control, these are measures that are meant to block unauthorized actions (Savitz, 2012). For examples biometrics, locks, mantraps. The second is detective controls; this is supposed to send alerts after or during an attack. For example, mandatory vacations, job rotation, reviewing and recording security cameras. The third is, corrective control; its purpose is to restore systems to normal after any unauthorized activity. For example, intrusion detection systems, business continuity planning, or antivirus solutions (SANS Institute,2003).  The fourth is, Recovery control, it is set after any security incident has occurred and is supposed to restore functionality of the system. For examples, reinstallation of data restored from backups and operation systems. The fifth, deterrent control, its purpose is to discourage actions. For example, signs like, “Security System” or “Beware of Dog.” The last one is, compensating control; these provide an alternative or supplementary solution to control difficult or expensive implements.

Education and Training Available

Everyone should benefit from the work of cyber threat researchers and trainers in different places or institution. Cybersecurity organizers provide training to people or employees; they educate them on how to fend off security threats (Stawowski, 2007).  They also train institutions on how they can protect themselves from all cyber-attacks. For example, the team of 250 threat researchers at Talos; they examine future threats, set cyber-attack policies and reveal vulnerabilities. Also, they enlighten the public about the significance of cybersecurity. These training institutions make the internet safer for everybody.

The Future of Cyber

Quantum technology is the future of cyber because in 10 to 20 years into the future. It will conquer the encryption methods like symmetric and asymmetric (Trim & Lee, 2014).  Symmetric encryption will be weakened by quantum computers using longer encryption keys. The algorithms used for asymmetric encryption will lose all their security. Asymmetric encryption algorithms are the one used in today’s e-identities, e-commerce, and also certification management is based on them. Therefore, it is important to follow current development so that these algorithms can be changed before quantum computers become a reality.

The Military and Other Organizations

Military agencies and organizations practice security rely on resilience (Lovelace, 2008). Based on resilience method, military and organizations like civilian agencies and private sectors study and learn the technique. However, the big challenge is to get ways to measure the effectiveness of every dollar spent on resilience. Most of all, people should learn from the military resilience approach to cybersecurity, which is the only realistic way to cope with today’s digital environment.

Conclusion

In conclusion, no precise method can fix the threat caused by cyber warfare because the cyber risk factors cannot be eradicated. Therefore everybody should try prevention by training about cybersecurity, noting the possible vulnerabilities in their day to day activities. Training ensures that individuals have enough knowledge and strategies on how to deal with cybersecurity challenges. Institutions and organizations should ensure they protect their data by all means and keep note of their employees. Prevention is better than cure.

References

Kostopoulos, G. (2012). Cyberspace and Cybersecurity. Boca Raton, FL: CRC Press.

Lovelace, D. C. (2008). Terrorism: Documents of International and Local Control. New York, NY: Oxford University Press, USA.

Manky, D. (Nov 8, 2010). Top 10 vulnerabilities inside the network. Retrieved from

http://www.networkworld.com/article/2193965/tech-primers/top-10-vulnerabilities-

inside-the-network.html

NetScreen Technologies Inc. (n.d). NetScreen white paper on the principles of secure network

design. Retrieved from http://www.onsiteaustin.com/whitepapers/principles

_of_secure_network_design.pdf

Powner, D. A. (2011). Cyberspace Policy: Executive Branch Is Making Progress Implementing 2009 Policy Review Recommendations, But Sustained Leadership Is Needed. Collingdale, PA: DIANE Publishing.

SANS Institute. (2003). SANS Institute white paper on Designing a secure local area network.

Retrieved from http://www.sans.org/reading-room/whitepapers/bestprac/designing-

secure-local-area-network-853

Savitz, E. (Dec 11, 2012). 5 key computer network security challenges for 2013. Retrieved from

http://www.forbes.com/sites/ciocentral/2012/12/11/5-key-computer-network-security-

challenges-for-2013/

Shoemaker, D., & Conklin, W. A. (2011). Cybersecurity: The Essential Body Of Knowledge. Boston, MA: Cengage Learning.

Stawowski, M. (2007). The principles of network security design. [PDF] Retrieved from

Click to access Principles_Network_Security_Design.pdf

Trim, D. P., & Lee, D. Y. (2014). Cyber Security Management: A Governance, Risk and Compliance Framework. Aldershot, England: Gower Publishing.

Do you need high quality Custom Essay Writing Services?