The new addition to the LR’s cyber resilience portfolio will provide an effective solution to the ‘human factor’ and addresses the need for sustained behavioural change to build an organisation’s resilience to the growing threat of cyber-attack, the class society said.
More effective employee training is key to reducing cyber-attacks and the costs of dealing with breaches after they occur. Upwards of 90% of all successful cyber-attacks occur due to human error, regardless of the role or responsibility of the individual.
Organisational response and resilience to the growing number of cyber-attacks is as much about people and their behaviours as about technology or compliance. Yet all too many organisations either do no cyber awareness learning or continue to rely on annual, ‘tick-box’ training that has little effectiveness, LR said.
A different approach is required, one that moves from passive, corporate training to collaborative and active learning. Without it, the damage to an organisation’s reputation, value and operational capabilities can be catastrophic.
JP Cavanna, LR’s Group Head of Cyber Security Business Development, said: “Cyber attackers target people not systems. Any organisations’ ability to mitigate and better manage their cyber risks must include ‘effective’ awareness training as part of a coherent risk strategy that includes technical control management, threat assessment and vulnerability management, incident response and strong governance, risk and compliance.
“The addition of the RESILIA Frontline cyber-awareness training to Lloyd’s Register’s cyber offering is a critical part of our mission to provide a world-class cyber risk management portfolio to our customers,” he added.
LR’s Cyber Security Product Manager, Elisa Cassi, commented: “In the marine industry there is not enough being done to address cyber awareness training and digital skills for seafarers and other staff. You could deploy technologies, a firewall, an intrusion prevention system to prevent a breach from happening, but what you cannot do is prevent people who are not trained opening the door to the attacker.
Through this partnership LR and AXELOS are transforming cyber security training from what is seen as a mundane box-checking exercise to an innovative approach that helps employees grasp some basic concepts and more importantly, change their habits,” she said.