March 7, 2021
Operational and organisational security, Policies and procedures
The idea of security should be included in the entire business, in its structure and processes. In principle, every activity performed concerning information in analogue and digital form should consider security aspects. When planning and implementing changes, you need to design them, taking into account the risk analysis. Security should be a permanent element of management information.
Clear, understandable and complete procedures and policies should define the duties and responsibilities of implementing process elements taking into account safety. Simultaneously, policies and procedures should not be bloated, which often hide in a drawer or save somewhere alongside hundreds of other computer files, and no one remembers about them. Internal regulations should be adapted to the enterprise’s real needs and capabilities and should be provided in a form and scope understandable for a given type of recipient.
Our services include building security processes and their implementation throughout the company. We create new, simple, but effective procedures and policies that ensure security and compliance with external regulations while not disrupting business and improving it. Our services also include staff training – adequately to each level and position – ensuring that the implemented safety aspects will be actually observed and at the same time will not negatively affect the quality and efficiency of work.
Read more:
May 30, 2023
Asked why he’d robbed banks, a notorious American gangster from the Great Depression era famously replied: ‘If they kept money in candy stores, I would rob candy stores.’ Is there any connection between old-style robbers and the plight of modern l law firms? On the surface, not really. After all, what can you steal from […]
April 25, 2023
Phishing Awareness Training – Simulating Phishing Attacks
Phishing training for employees is one of the most effective ways to strengthen your company’s defences against malware, ransomware, data loss and Business E-mail Compromise (BEC) attacks. Experience shows that awareness campaigns result in a significantly reduced click-through rate after each subsequent campaign. An employee who has made a mistake becomes more vigilant and more resistant […]
April 25, 2023
Phishing – how to deal with it?
Phishing is a form of social engineering where attackers deceive people into revealing sensitive information or installing malware such as ransomware. Phishing attacks have become increasingly sophisticated and often transparently mirror the site being targeted, allowing the attacker to observe everything while the victim is navigating the site, and transverse any additional security boundaries […]
