Nowadays, cyberattacks are a very common phenomenon. More and more businesses are falling victim to an attack. Companies that are targeted by hackers are often treated with caution and receive criticism. In reality, however, organizations should hire employees who have worked in companies that have experienced a hacking incident. In this way, they ensure that their organization remains protected.
Symantec and University College London conducted a survey of over 3,000 CISOs. More than half of executives say that learning from a failure is important for improving security a company. 's
However, researchers observed that most employees avoid talking about such incidents.
About 54% of respondents said they do not discuss breaches or attacks. A large portion of respondents (36%) said they do not want to say that they have worked at companies that have been attacked , because they fear that doing so would harm careers and future opportunities.
However, research has shown that professionals cybersecurity become better after an attack.
They gain experience, which helps them create effective systems to prevent attacks. It also helps them take measures to deal with an attack.
Many companies don't see these professionals as failures. Instead, they seek out people who have worked at companies that have been attacked because they believe they can learn a lot from them.
“Senior security personnel who have worked in organizations with a significant breach are often blamed. However, organizations need to think the exact opposite way about these professionals,”said Darren Thomson, CTO of Symantec.
“Someone who has experienced such an incident and seen the whole process, starts implementing additional security and privacy measures: this knowledge and experience is valuable and it is good to have an employee who has this,” he added.
It is very important to have employees with such experience, because the chances of an attack on any business (small or large) are very high.
Therefore, it is necessary to adopt prevention, protection and rehabilitation programs. If there is a staff who has worked with such a program, it would be very helpful. Also, they could give advice on security measures that they have used in the past and proved effective or, on the contrary, prevent others that will not bring the desired result.
“If you want to build a resilient organization, isn’t it better to hire a team of people who have lived through such situations, rather than someone who does not have that experience?” said Thomson.
He concluded that professionals who have experienced an attack know what steps need to be taken to improve the organization's security and argued that employers should seek out such personnel.
