Category: News

According to a recent survey of more than 1,000 U.S. and U.K.-based CISOs by the Ponemon Institute, 59 per cent of companies said they have experienced a data breach caused by one of their vendors or third parties. With large organisations today having upwards of 100,000 third-party vendors to manage, and small organisations having a significant subset of that, managing third-party vendor risk is an important part of an organisation’s overall cyber-health. KnowBe4, the provider of the world’s largest security awareness training and simulated phishing platform, today announced new functionality for its GRC management platform, KCM GRC, which helps organisations of all sizes address the growing problem of third-party vendor risk management.

Organisations that do not know the cyber-health of vendors they do business with put themselves at risk of breaches and other cyber-attacks.
According to the Ponemon survey, 75 per cent of organisations believe that third-party cybersecurity incidents are increasing and 22 per cent of respondents admitted they didn’t know if they’d had a third-party data breach in the past 12 months. Additionally, PwC’s recent report “The Global State of Information Security Survey 2018” states that there are very few companies that are correctly building cyber and privacy risk management into their digital transformation initiatives.

KnowBe4’s KCM GRC is an intuitive platform which Organisations can customise to measure third-party vendor risk. Once an initial assessment is completed, organisations can continually monitor against risk levels they’ve set. KCM GRC enables an organisation to keep track of everything within the platform, moving away from using cumbersome point products and office management tools, to adhere to policy and compliance management standards. As with all KnowBe4 offerings, KCM GRC comes with free and unlimited support.

“Third-party vendors introduce risk to any organisation. The vendor lifecycle and those risks must be managed. With the introduction of vendor risk in the KCM GRC platform, we designed it as a simple, intuitive and scalable platform to easily manage these risks.” said Blake Huebner, KnowBe4’s SVP of KCM Strategy.

For more information on KCM GRC, visit this page on the website

Cyber-attacks are surging and small and medium sized enterprises are easy prey for hackers. Joe Collinwood, CEO at CySure outlines why being cyber aware is a business necessity for all organisations

Small businesses in the UK are the target of an estimated 65,000 attempted cyber-attacks every day, according to new figures(i) from specialist global insurer Hiscox. According to the insurer, cyber security incidents cost the average small business £25,700 in direct costs such as ransoms paid and hardware replaced. However, indirect costs such as damage to reputation, the impact of losing customers and difficulty attracting future customers can be devastating. Complacency can cost SMEs dearly; the US National Cyber Security Alliance (ii) found that 60 percent of small firms go out of business within six months of a data breach.

In a rapidly evolving landscape of cyber threats it is vital that SMEs understand the risks and act fast or risk business failure due to a lack of a robust cyber security strategy. Here are three reasons why SMEs need to get cyber savvy:

1. Supply chain cyber security
Many organisations often rely on a vast network of agile SME suppliers and partners. However, with so many prolific data breaches occurring due to flaws in third-party partners, SMEs are coming under increasing pressure to prove their security credentials – or risk missing out on lucrative business opportunities.

Small companies make easier targets for attackers as they often don’t see themselves as a target and fail to sufficiently invest in having robust cyber security measures in place. However, for supply chains to work effectively they require every organisation involved to communicate within a central system to avoid issues such as inaccurate inventory reporting, unexpected shortages and supply chain fraud. With information and security arrangements shared across the open supply chain, the cyber-security of any one organisation within the chain is potentially only as strong as that of the weakest member.

A determined attacker will stress test the security of a supply chain, seeking to identify the weakest link and use any vulnerabilities present to gain access to other members of the chain. Whilst not always the case, it is often SMEs with their limited IT expertise and resources, that have the weakest cyber-security arrangements. Once an attack has been
successful against an SME supplier, attackers can then leverage their access as an entry vector into the larger network.

2. GDPR – it’s not been and gone!
The headlines that accompanied the launch of the General Data Protection Regulation (GDPR) in May 2018 may have subsided but the legal obligation hasn’t. Although termed regulation, GDPR is enshrined in law and all organisations, regardless of size, need to ensure they meet their obligations.

However, some SMEs are continuing to bury their heads in the sand and who can blame them given the constant negative focus on GDPR. There is a lot of misinformation out there but what hasn’t been fairly represented are the business benefits. The real driver for adopting new GDPR compliance principles should be to make business more efficient, secure and competitive.

To become compliant organisations must have a comprehensive understanding of their data, which provides SMEs with the opportunity to better understand their customer. With data cleaned up employees can be more productive and efficient through working with accurate, easily searchable and accessible data. Customers are the lifeblood of a modern digital business, by improving data management organisations can unlock the value within their data and improve performance.

3. Demonstrate commitment to effective cyber security
SME’s can protect themselves against cyber-attacks and mitigate the risk of being excluded from supply chains by undertaking a certification process. Cyber Essentials Plus is a UK government and industry backed scheme to help all organisations protect themselves against common attacks. In collaboration with Information Assurance for Small and Medium Enterprises (IAMSE) they set out basic technical controls for organisations to use which is annually assessed. The aim is to ensure that companies can understand their cyber risks, implement appropriate cyber defences, meet minimum cyber security standards without hindering business and share best practice.

By displaying the Cyber Essentials badge on its website, an SME can demonstrate to customers, partners and investors their commitment to cyber security. This is particularly beneficial for organisations that are storing personal information on customers and employees, or hosting commercially sensitive data. Through certification, SMEs can proactively provide sufficient guarantees that regulatory requirements will be met and the rights of data subjects protected.

Staying safe in a connected world
SMEs have an inherent advantage over larger companies, their agility enables them to be flexible and adjust to changes quickly. The lack of red tape and corporate complexity means they can act and adapt fast. By giving cyber security the same priority as other business goals, SMEs can maintain their advantage and thrive in the new digital age. Yet, according to the 2018 Cyber Security Breaches Survey(iii),25% of SMEs have no cyber security governance or risk management measures in place.

Cyber security need not be prohibitively expensive, SMEs need to seek solutions matching their size and needs, and not necessarily the same solutions used by a big organisation. By utilising an online information security management system (ISMS) that incorporates Cyber Essentials Plus, SMEs can undertake certification guided by a virtual online security officer (VOSO) as part of its wider cyber security measures. By navigating their way to compliance SMEs can look forward to the benefits of legislation through competitive differentiation and a new business culture that cherishes customer privacy and third-party relationships.

Top 5 Most Stressful Job Sectors

The results are as follows:

Teaching & Education Professionals
·         Earnings – £25,692 p/a (£1,692 more than the national avg) = 3/5

·         Stress – 3,020 reported cases of stress per 100,000 people (1,700 cases more than the national avg) = 2/5

·         Unpaid overtime – 12.5 hours a week (5 hours more than the national avg) = 1/5

·         Total Score = 6/15

Welfare Professionals
·         Earnings – £34,200 p/a (£10,200 more than the national avg) = 4/5

·         Stress – 4,080 cases of stress per 100,000 people (2,760 cases more than the national avg) = 1/5

·         Unpaid overtime – 8.6 hours a week (1.1 hours more than the national avg) = 2/5

·         Total Score = 7/15

Housing Association Professionals
·         Earnings – £24,012 p/a (£12 more than the national average) = 3/5

·         Stress – 3,050 cases of stress per 100,000 people (1,730 cases more than the national avg) = 2/5

·         Unpaid overtime – 8.6 hours a week (1.1 hours more than the national avg) = 2/5

·         Total Score = 7/15

Legal Professionals
·         Earnings – £69,992 p/a (£45,992 more than the national avg) = 5/5

·         Stress – 3,040 cases of stress per 100,000 people (1,720 cases more than the national avg) = 2/5

·         Unpaid overtime – 9.6 hours a week (2.1 hours more than the national avg) = 2/5

·         Total Score = 8/15

Customer Service
·         Earnings – £20,735 p/a (£3,265 less than the national avg) = 2/5

·         Stress – 2,770 cases of stress per 100,000 people (1,450 cases more than the national avg) = 3/5

·         Unpaid overtime – 0 hours a week (7.5 hours less than the national avg) = 5/5

·         Total Score = 10/15

Top 5 Least Stressful Job Sectors

Managers, Directors & Senior Officials
·         Earnings – £43,425 p/a (£19,425 more than the national avg) = 5/5

·         Stress – 1,200 cases of stress per 100,000 people (120 cases less than the national avg) = 4/5

·         Unpaid overtime – 9.2 hours a week (1.7 hours more than the national avg) = 1/5

·         Total Score = 10/15

Admin & Secretarial Occupations
·         Earnings – £23,207 p/a (£793 less than the national avg) =2/5

·         Stress – 1,310 cases of stress per 100,000 people (10 cases less than the national avg) = 4/5

·         Unpaid overtime – 0 hours a week (7.5 hours less than the national avg) = 5/5

·         Total Score = 11/15

Cleaners & Labourers (Elementary)
·         Earnings – £20,030 p/a (£3,970 less than the national avg) = 2/5

·         Stress – 780 cases of stress per 100,000 people (540 cases less than the national avg) = 5/5

·         Unpaid overtime – 0 hours a week (7.5 hours less than the national avg) = 5/5

·         Total Score = 12/15

Process, Plant & Machine Operatives
·         Earnings – £25,480 p/a (£1,480 more than the national avg) = 3/5

·         Stress – 630 cases of stress per 100,000 people (690 cases less than the national avg) = 5/5

·         Unpaid overtime – 0 hours a week (7.5 hours less than the national avg) = 5/5

·         Total Score = 13/15

Skilled Tradesmen
·         Earnings – £27,279 p/a (£3,279 more than the national avg= 3/5

·         Stress – 600 cases of stress per 100,000 people (720 cases less than the national avg) = 5/5

·         Unpaid overtime – 0 hours a week (7.5 hours less than the national avg)= 5/5

·         Total Score = 13/15

How to Identify and Manage Workplace Stress

If your occupation lies within the ‘top 5 most stressful job sectors’ – don’t worry. There are ways to identify the symptoms of being stressed, and therefore manage it. Some of the most common signs include:

·         Worrying – i.e. constantly asking questions or being concerned about upcoming deadlines.

·         An inability to concentrate

·         Having difficulty making decisions, especially with simple ones

·         Being less creative

·         Getting irritated easily

·         Being tearful

·         Having sleep problems

·         Suffering from headaches

If you are an employer or manager and believe a team member is suffering from stress, it’s vital to talk to the employee and find out the cause of their stress. Once you have identified the problem you can then find a solution that can be agreed on.

Most issues can always be solved and there is always help if you need it, such as a GP or talking to a charity like Mind. As well as this you should encourage your team to talk to a manager if they believe they’re suffering from stress or becoming mentally unwell.

Many employees will debate the necessity of corporate uniforms in their roles. Over time, employees of varying industries have kitted themselves out with what their employers think is both practical for more industrious-based jobs and smart in client-facing jobs.

With an insight from Jermyn Street Design, a brand at the forefront of producing bespoke uniforms for companies such as Pandora and Center Parcs, we will determine the impact of a dress code on the productiveness of a typical working day.

Long established traditions
Uniforms have been part of employment for centuries, starting off as a simple badge. Those delivering important messages or items would typically wear a badge with the emblem of the royalty which they served. It was a way of proving the legitimacy of the workers themselves, as well as giving workers such as merchants authority, to prove that their items are of higher quality. Though this was common centuries ago, the durability of them wasn’t up to the standards that they are today, so many of them did not survive. However, these badges were the start of the uniform tradition that would go onto become mainstream.

Liveries soon followed as a work uniform, often designed with family insignias used to indicate to whom the employee was serving. Typically, this type of uniform was popular throughout the 18th, 19th and 20th centuries, and many retail uniforms today still have similarities where brand logos are concerned.

The secret to a good mindset
Uniforms can implement a sense of belonging to employees, whereas having no dress code is also praised for allowing employees a sense of self-expression while working. It reminds them that they’re part of a team too, proudly representing the brand. Deploying a uniform could also harness team spirit, creating unity and fostering that feeling of belonging.

The ability to express yourself through clothing often comes at a cost though, and this can place employees in a financial predicament. Scientific research has also shown that those in formal clothes tend to perform better in situations than those in casual clothes, although this does not account for all industries. But opposing research has also found that 61% of employees are more productive at work when the dress code is relaxed.

Offices which require employees to wear suits have their reasoning rooted in psychology. In a study by Social Psychological and Personality Science, subjects were asked to dress in either casual, everyday clothing or formal business dress, before going on to take part in cognitive tests. It was found that those in business dress showed an increase of abstract thinking when compared to those who remained casual — the findings of the experiment suggest the effects are related to feelings of power and authority, in turn granting confidence.

Should businesses embrace having a dress code or not?
The argument on both sides of the uniform debate is even, as evidence has found no major advantage on either side. As a generalisation, dress codes in non-industry roles are approached differently by the individual; some people like the creativity and flexibility of not having a dress code enforced at their workplace, but others like dressing up to feel as though they are in a more formal working environment.

Getting dressed in the morning can be a time-consuming part of the day, hence why many people reserve a stock wardrobe for their working week. Steve Jobs was known for his black turtleneck jumper, jeans and New Balance trainers, and Mark Zuckerberg for his daily grey t-shirt, with their arguments stating that it lowers their decision-making process and allows for more brainpower on their day-to-day roles.

Customer service roles can often benefit from having a uniform, as it distinguishes staff from guests in environments such as hotels, leisure parks and airlines. But if smaller businesses were to adopt a ‘wear what makes you comfortable’ dress code, where health and safety isn’t concerned, this would perhaps encourage a more relaxed environment in the workplace.

Sources
http://www.tntmagazine.com/lifestyle-career/work-in-the-uk/a-brief-history-of-work-uniforms

https://www.recruitment-international.co.uk/blog/2017/01/61-percent-of-employees-more-productive-when-dress-code-is-relaxed-study-finds

http://blog.xamax.co.uk/benefits-of-uniforms-in-the-workplace-that-you-didnt-know

https://www.scientificamerican.com/article/dress-for-success-how-clothes-influence-our-performance/