Building a cyber-aware workforce

Issue 4 2023 Information Security, Security Services & Risk Management

Fortinet released its 2023 Security Awareness and Training Global Research Brief, highlighting the importance of organisations building a cyber-aware workforce to strengthen their security posture and reduce cyber-attacks.

Organisations are grappling with an increasingly sophisticated threat landscape. The most recent Global Threat Landscape Report from Fortinet’s FortiGuard Labs found that ransomware threats remain at peak levels with no evidence of slowing down globally. At the same time, Fortinet’s 2023 Cybersecurity Skills Gap Global Report found that 84% of organisations experienced one or more breaches in 2022.

And now the latest research from Fortinet’s 2023 Security Awareness and Training Global Research Brief reveals that more than 90% of leaders believe that increased employee cybersecurity awareness would help decrease the occurrence of cyberattacks. As organisations face increasing cyber risks, the research highlights the important role of employees in serving as an organisation’s first line of defence in protecting their organisation from cybercrime. Key findings from Fortinet’s research include:

• Employees are being targeted by cyber criminals. The research found that 81% of organisations faced malware, phishing, and password attacks last year, mainly targeted at users. This underscores that employees can be an organisation’s weakest point, or one of its most powerful defences.

• Having an effective training program is key to instilling good cyber hygiene in employees. Eighty-five percent of leaders say their organisation has a security awareness and training programme, yet more than 50% believe their employees still lack cybersecurity knowledge. This gap suggests the training programmes in place may not be as effective as they could be, resulting in inconsistency in how employees apply good cyber hygiene practices, or that training is not reinforced sufficiently.

• Cybersecurity is increasingly becoming a priority for the board of directors. The report found that 93% of organisations indicated their board of directors are asking about the organisation’s cyber defences and strategy.

Building a Cyber-aware Workforce

For organisations looking to implement cybersecurity awareness training for their employees, or those evaluating the effectiveness of their current program, Fortinet offers its Security Awareness and Training service to develop a cyber-aware workforce. Designed by the Fortinet Training Institute’s trainers, the service covers a broad range of topics in a practical way, and reinforces learnings with reminders and checks, helping to improve training outcomes. Organisations deploying the service also have access to a dashboard and reporting to address cyber insurance and compliance needs.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Understanding the Shared Responsibility Model
Infrastructure Security Services & Risk Management
While the cloud can certainly be a growth enabler in many ways, it can also introduce new security risks. Companies want to have a clear understanding of where their security duties end and where their cloud service provider’s begin.

Read more...
Africa’s largest Zero Trust platform
NEC XON Information Security Commercial (Industry)
Africa has reached a significant cybersecurity milestone with the successful deployment of the continent’s largest Palo Alto Networks Prisma Access and Prisma Access Browser Zero Trust environment, supporting secure remote access for more than 40 000 users for a large enterprise in Africa.

Read more...
Supply chain attacks top threat over 12 months
Information Security
Supply chain attacks have become the most prevalent cyberthreat confronting businesses over the past year, according to a new Kaspersky global study, with nearly one-third of companies worldwide experiencing a supply chain threat in the past year.

Read more...
From vibe hacking to flat-pack malware
Information Security AI & Data Analytics
HP issued its latest Threat Insights Report, with strong indications that attackers are using AI to scale and accelerate campaigns, and that many are prioritising cost, effort, and efficiency over quality.

Read more...
NEC XON secures mobile provider’s hybrid identities
NEC XON Access Control & Identity Management Information Security Commercial (Industry)
For a leading South African telecommunications operator, identity protection has become a strategic priority as identity-centric attacks proliferate across the industry. The company faced mounting pressure to secure both human and non-human identities across complex hybrid environments.

Read more...
Microsoft 365 security is a ticking time bomb
Information Security
Across boardrooms and IT departments, a dangerous assumption persists that because data is stored in Microsoft 365 and Azure, it is automatically secure. This belief is fundamentally flawed and fosters a false sense of protection.

Read more...
Rise in malicious insider threat reports
News & Events Information Security
Mimecast Study finds 46% of SA organisations report a rise in malicious insider threat reports over the past year: reveals disconnect between security awareness and technical controls as AI-powered attacks accelerate.

Read more...
New campaign exploiting Google Tasks notifications
News & Events Information Security
New phishing scheme abuses legitimate Google Tasks notifications to trick corporate users into revealing corporate login credentials, which can then be used to gain unauthorised access to company systems, steal data, or launch further attacks.

Read more...
“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.