[{"innerBlocks":[],"name":"core\/freeform","postId":127368,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"

10 ways to improve employee cyber awareness and compliance<\/h2>
A healthcare organization\u2019s employees are the first line of defense against a cyberattack, but they also can be the weakest link in protection. Lazarus Alliance Proactive Cyber Security Services, an advisory firm, offers these 10 suggestions for improving security among employees.<\/p>

Provider security training should be mandatory and continuous<\/h2>
The cyber threat environment constantly changes, so security training cannot be viewed as a \u201cone and done\u201d exercise. It is a continuous process that should begin during the onboarding process and continue through an employee\u2019s entire term of employment.<\/p>

Employee cyber training involves more than compliance<\/h2>
Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Keep cybersecurity rules and procedures simple<\/h2>
Employee cyber security manuals often are written by the IT department or security personnel, who may fill them with so much \u201ctech-speak\u201d that it's often difficult for employees to understand. Rules and procedures should be written in plain language that non-IT employees can easily understand.<\/p>

Everyone needs to be trained<\/h2>
Cybersecurity is everyone\u2019s responsibility. This includes all levels of employees up to the C-suite, as well as part-time employees, seasonable workers, temps and interns. Everyone in the organization with access to a computer must be trained on best practices.<\/p>

Implement clear cyber threat reporting procedures<\/h2>
If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

Tie workplace cyber security to personal cyber security<\/h2>
Illustrating why cybersecurity hygiene is important both in and outside the office is a smart way to reinforce training lessons and improve user buy-in. Organizations should use real-world examples to which everyone can relate, such as phishing scams that seek to steal account credentials.<\/p>

Employ behavior analytics and continuous monitoring<\/h2>
Pairing user behavior analytics with continuous monitoring of network activity protects a provider organization in two ways. First, it enables identification of employees who are snooping around in areas of the system to which they don\u2019t need access. Second, the pairing of analytics and monitoring enables the organization to identify stolen credentials by flagging log-ins at odd hours or from unusual locations. Security execs at healthcare organizations should set up the system to temporarily suspend access until there is a determination of what\u2019s going on.<\/p>

Regularly review employee system access<\/h2>
The best way to ensure employees do not misuse credentials is to prevent them from doing so in the first place. Give employees only the minimum amount of system access to perform their jobs\u2014and no more. Then, regularly review access levels for appropriateness.<\/p>

Don\u2019t berate employees for making mistakes<\/h2>
Even the best employees will make a mistake. If they fear being fired for inadvertently clicking on a phishing link, they may not report the incident or try to cover it up, which would make the situation worse. Encourage reporting of missteps as soon as possible and assure the employee that they will not be disciplined for doing so.<\/p>

Reward employees for good cyber behavior<\/h2>
In addition to not beating employees with sticks, offers some carrots. Recognize employees who flag phishing attempts and other attempted cyberattacks.<\/p>

","saveContent":"

10 ways to improve employee cyber awareness and compliance<\/h2>
A healthcare organization\u2019s employees are the first line of defense against a cyberattack, but they also can be the weakest link in protection. Lazarus Alliance Proactive Cyber Security Services, an advisory firm, offers these 10 suggestions for improving security among employees.<\/p>

Provider security training should be mandatory and continuous<\/h2>
The cyber threat environment constantly changes, so security training cannot be viewed as a \u201cone and done\u201d exercise. It is a continuous process that should begin during the onboarding process and continue through an employee\u2019s entire term of employment.<\/p>

Employee cyber training involves more than compliance<\/h2>
Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Keep cybersecurity rules and procedures simple<\/h2>
Employee cyber security manuals often are written by the IT department or security personnel, who may fill them with so much \u201ctech-speak\u201d that it's often difficult for employees to understand. Rules and procedures should be written in plain language that non-IT employees can easily understand.<\/p>

Everyone needs to be trained<\/h2>
Cybersecurity is everyone\u2019s responsibility. This includes all levels of employees up to the C-suite, as well as part-time employees, seasonable workers, temps and interns. Everyone in the organization with access to a computer must be trained on best practices.<\/p>

Implement clear cyber threat reporting procedures<\/h2>
If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

Tie workplace cyber security to personal cyber security<\/h2>
Illustrating why cybersecurity hygiene is important both in and outside the office is a smart way to reinforce training lessons and improve user buy-in. Organizations should use real-world examples to which everyone can relate, such as phishing scams that seek to steal account credentials.<\/p>

Employ behavior analytics and continuous monitoring<\/h2>
Pairing user behavior analytics with continuous monitoring of network activity protects a provider organization in two ways. First, it enables identification of employees who are snooping around in areas of the system to which they don\u2019t need access. Second, the pairing of analytics and monitoring enables the organization to identify stolen credentials by flagging log-ins at odd hours or from unusual locations. Security execs at healthcare organizations should set up the system to temporarily suspend access until there is a determination of what\u2019s going on.<\/p>

Regularly review employee system access<\/h2>
The best way to ensure employees do not misuse credentials is to prevent them from doing so in the first place. Give employees only the minimum amount of system access to perform their jobs\u2014and no more. Then, regularly review access levels for appropriateness.<\/p>

Don\u2019t berate employees for making mistakes<\/h2>
Even the best employees will make a mistake. If they fear being fired for inadvertently clicking on a phishing link, they may not report the incident or try to cover it up, which would make the situation worse. Encourage reporting of missteps as soon as possible and assure the employee that they will not be disciplined for doing so.<\/p>

Reward employees for good cyber behavior<\/h2>
In addition to not beating employees with sticks, offers some carrots. Recognize employees who flag phishing attempts and other attempted cyberattacks.<\/p>

","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Employee cyber training involves more than compliance<\/h2>Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Implement clear cyber threat reporting procedures<\/h2>If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

Reward employees for good cyber behavior<\/h2>In addition to not beating employees with sticks, offers some carrots. Recognize employees who flag phishing attempts and other attempted cyberattacks.<\/p>","saveContent":"

Employee cyber training involves more than compliance<\/h2>Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Implement clear cyber threat reporting procedures<\/h2>If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

Employee cyber training involves more than compliance<\/h2>
Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Implement clear cyber threat reporting procedures<\/h2>
If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

Reward employees for good cyber behavior<\/h2>
In addition to not beating employees with sticks, offers some carrots. Recognize employees who flag phishing attempts and other attempted cyberattacks.<\/p>

","saveContent":"

Employee cyber training involves more than compliance<\/h2>
Many healthcare organizations make the mistake of focusing employee cyber training exclusively on HIPAA compliance. While compliance is important, it does not automatically equate to cyber security.<\/p>

Implement clear cyber threat reporting procedures<\/h2>
If an employee receives a suspicious email or finds a flash drive on the floor, they need to be certain about who they should report the incident to and the procedures for doing so.<\/p>

10 ways to improve employee cyber awareness and compliance

More for you