Creating A Culture Of Privacy Awareness

Anonymous hacker in front of his computer with red light wall backgroundAnonymous hacker in a black hoody with laptop in front of a code background with binary streams cyber security concept
B&T Magazine
Edited by B&T Magazine
SHARE
THIS



As Privacy Awareness Week closes, it’s important to reflect on what makes a data secure culture in the workplace. Here are five tips to create a culture of awareness in your workplace.

By Leana El-Hourani, head of governance, risk and compliance at IVE

Data is arguably the world’s most valuable commodity and protecting the privacy of that data is crucial to any business’ success.

More and more, we see news about the latest Cybersecurity incident that’s brought a company to its knees. Take just this week for example.

NSW Labour was hacked demanding a ransom within 240 hours. Uniting Care was cyber attacked by notorious ransom gang REvil/Sodin and insurance companies have hiked premiums by up to 30 per cent to counter cyber attacks.

That’s all during this week!

Privacy and data breaches are what keep CEOs and CIOs up at night, and rightly so. Having military grade systems in place is a necessity, and even then, there are no guarantees.

During Privacy Awareness Week, ask yourself the question, does your business have the resilience needed to survive when a cyber attack happens?

If the answer is no, or you’re not sure, here are some tips on how to create a culture of Privacy Awareness to prevent data breaches.

Align with partners that invest in the security of data

Look for certifications such as ISO 27001, PCI-DSS, IRAP and SOC2. Having certifications is a massive investment and demonstrates an organisation’s commitment to the protection of information.

It’s vital if you want to build trust with your customers—especially when they hand over their data to you every day.

Having certifications means the business must undergo regular scrutiny to meet the requirements of those standards, this requires an ongoing review of controls to ensure best practice processes and continuous improvements are in place, and with malicious actors becoming more sophisticated, it’s not an easy feat to achieve or maintain.

Organisations are also responsible for how third-parties use and collect personal information. The third-party should have policies on how they collect, store, use and share personal information.

Cyber incidents such as those that affected ASX-listed aged care operator Regis in August last year, Isentia in November, and more recently the entire UnitingCare Queensland internal IT system attacked by ransomware software, demonstrated that the cost of these incidents is profound with costs in the millions of dollars, damage to reputation and impact on customers.

Working with organisations who invest in certifications goes a long way in mitigating risks.

Educate your staff

With human error still a major cause of data breaches, ensuring that you have a meaningful and relevant awareness training program is essential.

We are all responsible for data security, from the operational floor, to the executive level, it is imperative that all parts of the business understand the obligations of the Privacy Act, and the Policies in place to protect your information.

From January to June 2020, the number of data breach notifications attributed to ransomware attacks increased by more than 150 per cent compared to the previous six months—increasing from 13 to 33.

As a result, simulated phishing attacks with appropriate reporting procedures are an excellent example of a strong security culture within an organisation. Thereby reducing the chances of fraudulent activity.

Ensure there’s a process for capturing when things will occasionally go wrong and learn from them.

Make the business resilient

Having a plan for when things go wrong is critical, as the recent pandemic events have taught us. Ensuring that a Business Continuity Plan is in place and tested regularly shows that a business is prepared for known risks.

COVID-19 meant that a privacy impact assessment was necessary to evaluate the impact of remote working, potential site closures, and reviewing suppliers to ensure that the privacy of information was still being maintained.

Get your teams involved in audits. By ensuring that your staff know what the auditors are looking for, they’ll value the importance of the policies and procedures in place and will be able to make them more effective and relevant to the business.

Do your due diligence and monitor any partners and vendors. If you don’t know what your third-party’s policies are, ask. This may prompt them to become more privacy aware.

Remember if a vendor or partner’s data is compromised, your data could be too!

Use risk language

Have a robust risk management process and ensure every team member knows how to identify and report a risk.

Risk management language such as mitigation, risk treatment plans and risk ratings should be spoken at every meeting. Risks should not just be discussed in the boardroom, but within all levels of the business.

Have a good Data Breach Policy

Ensuring that everyone understands what to do in the event of an incident is imperative, and not having one could have a disastrous effect on the business and impacted individuals.

A good data breach policy will provide step by step instructions and the tools to facilitate communication through the business.

No matter what an organisation does, there’s always the chance that something could go wrong. Focus on the five steps and watch your culture change.

Leana El-Hourani is IVE Group’s head of governance, risk and compliance.

Please login with linkedin to comment

IVE Privacy Awareness Week

Latest News

Podium Announces Australia’s ‘Most Loved Local Businesses’
  • Campaigns

Podium Announces Australia’s ‘Most Loved Local Businesses’

Local businesses communication and payments platform, Podium, and Council of Small Businesses Organisations of Australia (COSBOA) has today announced the winners of Australia’s Most Loved Local Businesses, which includes a specialised biking store and a stigma-busting dental practice. The campaign aimed to shine the spotlight on a handful of vibrant, dynamic and innovative Australian businesses following an […]

Monday TV Wrap: Nine’s Snackmasters Debuts & Wins Entertainment
  • Media

Monday TV Wrap: Nine’s Snackmasters Debuts & Wins Entertainment

Nine’s Snackmasters wins the night in entertainment pulling in 603,000 viewers – if you can watch this without snacking, as far as I’m concerned you are superhuman! In news, news – Seven News hit 949,000 viewers while Nine News had 872,000 viewers. Nine’s A Current Affair snagged the second entertainment spot with 696,000 viewers – Do you […]

Lorraine Jokovic: What We Don’t Know About Diversity & Inclusion In Adland & How That’s About To Change
  • Opinion

Lorraine Jokovic: What We Don’t Know About Diversity & Inclusion In Adland & How That’s About To Change

Lorraine Jokovic (main photo) is the CEO of LOUD Communications, ACA board member and chair of ACA’s diversity and inclusion committee. Ahead of the launch of ACA’s Create Space diversity and inclusion census, Jokovic says adland often talks a good diversity and inclusion talk but its actions not words that are required… As an industry […]

Opinion

by B&T Magazine

B&T Magazine
MFA Releases Results Of Second Diversity, Equity & Inclusion Survey
  • Media

MFA Releases Results Of Second Diversity, Equity & Inclusion Survey

Media agency members of the Media Federation of Australia (MFA) have completed the industry’s second annual DE&I survey, providing a holistic view of progress in the area of diversity, equity and inclusion. The aim of the survey – conducted in partnership with Mediai and completed by 2,203 individuals working in Australian media agencies – is […]

Ethical Cosmetics Company Lush Closes All Social Media Accounts
  • Media
  • Technology

Ethical Cosmetics Company Lush Closes All Social Media Accounts

Ethical cosmetics chain Lush has boycotted social media over concerns it is having a negative impact on teenagers’ mental health. The cosmetics company closed down all it’s social media accounts last week, consisting of Instagram, Facebook and Snapchat. It’s a pretty big deal considering The Guardian, reported that Lush has amassed over 10 million followers […]

UnLtd Announces Open Applications For 2022 ‘Ambassador For Good’ Program
  • Media

UnLtd Announces Open Applications For 2022 ‘Ambassador For Good’ Program

UnLtd and Yahoo’s inaugural Ambassador for Good program has come to a close for 2021, with the call for applications being sent out for next year. From over 80 applicants, 16 individuals from across the industry were selected into the launch initiative to use their skills and networks for good. Over the past year, the […]

Celeste Barber Teams Up With Bras N Things For A Relatable Lingerie Collection
  • Marketing

Celeste Barber Teams Up With Bras N Things For A Relatable Lingerie Collection

Comedian and social media star, Celeste Barber has collaborated with lingerie brand Bras N Things for a relatable and wearable lingerie collection. Barber’s collaboration with Bras N Things is bright, vibrant and fun. It’s relaxed and comfortable but there is also plenty of drama and sass. Barber worked closely with the Bras N Things team […]

Creator Company Jellysmack Expands ANZ Team
  • Media
  • Technology

Creator Company Jellysmack Expands ANZ Team

Global creator company Jellysmack has announced its latest Australia and New Zealand team members as the company accelerates its growth plans in the region. Last month, Jellysmack launched its popular creator program in Australia and New Zealand and prioritised the region as a key growth market within the $US100 billion creator economy. The VC-backed technology […]

Mix 94.5 Partner With Starcom For Masters ‘Milk Carton’ Regatta
  • Marketing
  • Media

Mix 94.5 Partner With Starcom For Masters ‘Milk Carton’ Regatta

Bega’s flavoured milk brand, Masters, saw the return of its iconic Western Australian event over the weekend, with locals taking to the water at Hillary’s Boat Harbour in Perth, to race watercrafts made from Masters milk cartons. The ‘Masters Milk Regatta’ this year partnered with SCA’s Mix 94.5 station – with Starcom overseeing media strategy, […]

Love Island Australia Dumpees Join Tinder For One Night Of Swipes
  • Marketing

Love Island Australia Dumpees Join Tinder For One Night Of Swipes

Three dumped islanders from the Love Island Australia Villa will be joining Tinder for an exclusive in-app experience, ‘Swipe Island’, looking for another chance to find their lucky match. Between 6pm-11pm tonight, Aussie Tinder members will have the final chance to participate in the virtual ‘Swipe Island’ experience and match with ex Villa babes including […]

Nestlé Australia Announces Switch To 100 Per Cent Renewable Energy
  • Marketing

Nestlé Australia Announces Switch To 100 Per Cent Renewable Energy

Nestlé Australia has announced it is switching to renewable energy, meaning Aussie favourites, KitKat, Milo, Allen’s, Uncle Toby’s and Purina will now be made at 100 per cent renewable energy-powered factories. Nestlé Australia’s announcement comes four years ahead of its original global target of 2025. The company partnered with CWP Renewables to make its first renewable power […]

Why We Need More I In Team
  • Disruption
  • Media
  • Opinion

Why We Need More I In Team

Here's a top piece by the Ad Council's Hannah Sturrock that deserves your attention. Well, more than a passing glance.

Opinion

by B&T Magazine

B&T Magazine