Training Industry Magazine - Fall 2023 - 44

If you want to do business with state or
federal agencies, you may need to show
that all your employees must undergo
annual
cybersecurity
compliance
training. If you have contracts with federal
agencies and aren't in compliance, you
could lose the business and the ability
to bid on other federal work.
CYBERSECURITY
IS EVERYONE'S
RESPONSIBILITY.
a learning management system (LMS) or
a learning experience platform (LXP).
7
Provide Additional
Cybersecurity Training for
IT Professionals
While everyone at an organization
needs basic cybersecurity training
to be wary of possible threats like
social engineering and malicious
links, information technology (IT)
professionals need special training to
secure your network and the data you
hold in the cloud. Even if they don't work
in cybersecurity, the IT team needs
special
training.
For
example, web
developers need to be able to ensure
that they are using best practices to
write code. If there are holes in the
code, attackers can enter your network.
Different job roles may need different
training. For example, sales and
marketing people may need to know
privacy laws like the General Data
Protection Regulation (GDPR) and
people who work in legal and compliance
will need to know about incident
response protocols and the process
for notifying clients after a breach.
Training requirements may vary based
on roles and levels of responsibility.
A privileged user, such as a system
administrator, engineer or developer,
may have different requirements than a
standard user, who may have different
requirements than an executive. The
best way to keep track of who has taken
your training and passed the test is with
There are a number of vendorneutral
industry certifications that
are focused on cloud security that
cover cybersecurity for a wide
range
of
technologies,
tools
and
platforms. The Computing Technology
Industry Association (CompTIA),
Certified Information System Security
Professional (CISSP), CCSP and
Certified Information Security Manager
(CISM) are some of the more popular
vendor-neutral certifications.
Organizations will also need special
cybersecurity training to protect their
data in their public cloud. Amazon
Web Services (AWS), Microsoft Azure,
Google Cloud, and Oracle Cloud
Infrastructure (OCI) all have different
Employees Are Your First Line of Defense
Employees generally don't realize how much their actions have a direct impact on the security of your organization,
so it's up to you to help them understand that. Employees are the first line of defense against attacks.
Known for easily falling victim to attacks, employees are often an open door to your network, hence why they
are one of the main targets of threat actors. With swift action, employees can block phishing emails or social
engineering attacks and report the offending behaviors if they've been well-trained.
That's why companies must ensure that all employees undergo defensive cybersecurity training at least once or
twice a year so they can spot phishing emails and web pages that may appear to be authentic but really aren't.
Matthew George is the vice president
of marketing at ExitCertified. Matthew
has worked in the education industry
for over 13 years in various marketing
roles and countries. In
this time, he's
seen technology evolve and change
repeatedly, especially the importance
of organizations keeping employees'
skills up to date. He is passionate about
enabling organizations to get the right
skills and expertise from an industryleading
and authorized training company
such as ExitCertified.com. Email Matthew.
security protocols. Optimal Azure cloud
security looks different than optimal
AWS security, which in turn is different
from the best solution for a multicloud
environment. Understanding the
different security practices associated
with each cloud provider makes it
easier to develop a solution that keeps
your data secure.
In Closing
Cybersecurity is everyone's
responsibility. Humans are the weakest
link
in
your
cybersecurity
chain:
Ensuring everyone takes cybersecurity
awareness seriously can enhance an
organization's overall security posture
and create a resilient defense against
evolving cyberthreats. The most
mature awareness programs are those
that have support from leadership.
To effectively engage leadership,
explain the importance of continual
cybersecurity awareness training and
effectively managing your organization's
human risk.
44

https://www.exitcertified.com/blog/five-ways-lxps-help-l&d https://trainingindustry.com/articles/it-and-technical-training/what-leaders-need-to-know-about-the-cloud-to-adapt-to-hybrid-culture-spon-netcom/ https://trainingindustry.com/articles/it-and-technical-training/what-leaders-need-to-know-about-the-cloud-to-adapt-to-hybrid-culture-spon-netcom/ https://www.exitcertified.com/

Training Industry Magazine - Fall 2023

Table of Contents for the Digital Edition of Training Industry Magazine - Fall 2023