Information security needs to focus on the human factor

Human error has become one of the biggest contributors to data breaches. Organizations have traditionally relied on the effectiveness of technology controls but haven't addressed the fundamental reasons why humans make mistakes and are susceptible to manipulation. A new report from the Information Security Forum finds that by helping staff understand how these vulnerabilities can lead to poor decision making and errors, organizations can better manage risk. "Human-centered security starts by acknowledging that humans have psychological vulnerabilities that may impact decision making," says Steve Durbin, managing director of ISF. "During interactions with technology, controls and data employees may make errors… [Continue Reading]