CS Jan-Feb 2024

training
SAFEGUARDING HR IN THE AGE OF INCESSANT THREAT
ROBERT O'BRIEN OF METACOMPLIANCE HIGHLIGHTS HOW DEPARTMENTAL CYBER SECURITY
TRAINING CAN HELP PROTECT AGAINST THE RELENTLESS CYBER THREATS FACED BY HR TEAMS
MetaCompliance chief evangelist Robert
O'Brien: AI-related cybercrime has led to
a surge in targeted attacks, with the
human resources department of
particular focus.
Imagine that you had the opportunity
to hire a talent management professional
whose qualifications were
unparalleled, suggests Robert O'Brien,
chief evangelist, MetaCompliance. "They
possess not only an in-depth understanding
of HR systems, people management
processes and recruitment strategies, but
also an extensive knowledge of sociology,
behavioural economics and a myriad
of other skills. Enter the era of AI, the
epitome of this visionary professional."
Whether you embrace it or resist it,
AI is an indomitable force that is here to
stay, he points out, with its impact set to
dwarf the transformative influence of the
internet in the workplace. "The world of
tomorrow, shaped by AI, will make our
current interactions with technology
seem as rudimentary as child's play."
Most organisations are currently
grappling with the challenges posed
by employees incorporating AI, such as
chatbots and GPTs, into their daily work
routines, O'Brien continues. "These challenges
encompass a wide array of issues,
with two critical concerns rising to the
surface: PR vulnerability and the fallibility
of AI responses, which are at the forefront
of the problems organisations must
navigate as they embrace AI adoption.
"On the flip side, cybercriminals exhibit
no hesitation in embracing AI and are
eagerly leveraging this technology to
amplify their assaults on organisations,
motivated by both mischief and financial
gain." For specific departments in the
organisation, this enthusiasm for AIrelated
cybercrime has led to a surge in
targeted attacks,
with the human resources
department of particular focus.
Cybercriminals are harnessing the
wealth of knowledge provided by AI to
impersonate HR personnel, their trusted
suppliers and other high-ranking executive
functions. This deception enables
them to infiltrate confidential data
stores and exploit the authority of the
HR department, often manipulating
privileged interactions within the
organisation for their deceitful ends."
SURGE IN ATTACKS ON HR
Traditionally, cyber threats involved
remote hackers employing social
engineering techniques or leveraging
vulnerabilities in outdated software
systems," states O'Brien. "While these
methods are still prevalent, the advent
of AI technology has opened a Pandora's
box of possibilities for cybercriminals.
This evolution is driven by the increased
sophistication of AI, allowing it to
automate and enhance the effectiveness
of various cyberattack vectors.
"The potential consequences of AIdriven
attacks are nothing short of
alarming. We're no longer dealing solely
14
computing security Jan/Feb 2024 @CSMagAndAwards www.computingsecurity.co.uk