The Cyber Defense eMagazine November Edition for 2023

Why executive data privacy is critical.
It’s important to understand that threats facing executives, separate from the rest of the workforce, are
real and on the rise. In fact, 58% of CEOs in the United States have received physical threats after taking
a position on a controversial topic such as race, politics or gender. One reason for this is the increasing
exposure of executives’ personally identifiable information (PII) via social media channels. A recent poll
of CEOs from the 2022 Fortune 500 list revealed that 70% of them have a profile on at least one social
media platform, which is a 62% increase from 2020.
As companies report more cybercriminal attacks on senior-level executives, especially with business or
personal accounts as a tool, protecting personally identifiable information should be a top priority.
Executives are increasingly targeted directly or used as pawns in a larger organizational scheme, which
can compromise sensitive business data and lead to unexpected, exorbitant costs.
Data privacy, internal and external, helps minimize the risk of corporate espionage in the form of hacking.
While most companies invest heavily in cybersecurity, it’s not comprehensive for today’s ecosystem. The
next step to stay ahead of threats is External Data Privacy (EDP). This allows an organization to audit
and secure data that is already outside of the organization which could be used in a malicious way.
Executives' personal information and online activity, such as email, social media or shopping behavior,
may be used against them if they are not secured properly. Protecting and monitoring personal accounts
and digital behavior is a way to safeguard not only the senior-level executive but also the reputation of a
company and its stakeholders.
Social engineering on the rise
There has been a significant increase in social engineering attacks, posing a serious threat to
organizations and individuals in leadership positions. In fact, it was the top attack type in 2022.
Social engineering refers to the manipulation of individuals to gain unauthorized access to sensitive
information or systems. It is often carried out through deceptive tactics, such as standard phishing via
email or text message, or through social media, which can appear in the form of account hacking,
deception, impersonation or fraud.
With the widespread use of social media platforms and increased online activity, individuals have become
more susceptible to this type of manipulation. As such, organizations are also at risk, directly, or as
byproducts of their staff’s poor External Data Privacy (EDP). These social engineering techniques can
be used to breach security systems and gain unauthorized access to valuable data.
Executives must be cautious about the information they share online and be vigilant against suspicious
emails or messages asking for personal details.
Once information has been shared, however, it’s out there to be manipulated and used by threat actors,
hence the need for stronger EDP across all employee segments. Organizations should prioritize investing
Cyber Defense eMagazine – November 2023 Edition 44
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.