The Cyber Defense eMagazine November Edition for 2023

In terms of prioritization, out of eight items, cybersecurity was ranked fifth overall. All participants
mentioned their companies prioritized other goals over cybersecurity, such as client satisfaction and
business growth. However, most participants agreed cybersecurity should be a higher priority because
of its potential to affect core business operations.
For most participants, cyber attacks are handled internally until external resources are needed. When
determining whether to bring in an external vendor, IT considered expertise and certifications, while
communications focused on confidentiality. Smaller companies who may not have the right expertise inhouse
are more likely to hire an external vendor.
It’s often unclear what steps a company can take to persuade leadership on the importance of
cybersecurity and effectively build and communicate a plan. Following the survey, three key solutions
emerged on how to bridge the cybersecurity gap between IT and communications departments.
Build a cyber-aware culture:
Oftentimes, leadership can’t visualize how cybersecurity can impact the bottom-line or think cybersecurity
insurance is enough to cover damages. Therefore, they don’t prioritize or put funding towards it.
Companies can appoint a Chief Information Security Officer to oversee cybersecurity initiatives and
ensure it’s integrated and communicated throughout an organization. The Hahn team undergoes
quarterly cybersecurity reviews with Silent Quadrant to ensure proper security controls are in place and
operating effectively. Our team acts as a human firewall by training monthly on how to recognize and
respond to threats.
Build a joint cyber rapid response plan with regular updating and testing:
Cybersecurity is an ongoing investment and requires time and funds for regular updates and
maintenance. However, the cost outweighs potential risks, affecting jobs, operations, reputations and
client trust. Many companies believe the chances for a data breach are low or their current security
measures are sufficient. Unfortunately, as we saw with the disastrous Colonial Pipeline hack, even just
one attack can come with severe effects. Hahn’s information security program is built upon the Silent
Quadrant Cybersecurity Framework, which exceeds National Institute of Standards and Technology
standards. With the help of a cybersecurity experts and rapid response workshops, companies can build
a functional plan and continually assess one’s current security posture by testing for vulnerabilities.
Build an effective method to communicate the plan:
For a cyber rapid response plan, remove any technical jargon which could be misinterpreted or lead to
confusion. Make sure everyone fully understands the procedure, roles and responsibilities. Hahn, with
Silent Quadrant’s support, teaches clients to make security best practices instinctual by inviting internal
Cyber Defense eMagazine – November 2023 Edition 171
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.