Pub. 10 2021 Issue 1

The Commun i tyBanker 12 F E A T U R E Customer Cybersecurity Awareness — Creating a Culture of Security By Eric Chase, Information Security Consultant — SBS CyberSecurity, LLC Customers Present Unique Risk Today’s world of mobile-centric ultra-connectivity, where we have access to everything we want through our smartphones, presents organizations with an abundance of opportunities. However, the flip side to this opportunity is the ever-present cyber risk posed by the internet and all things connected. While most organizations think through the immediate risk of cyber threats to their business via cyber-attacks, known vulnerabilities and security flaws, not many organizations recognize the risk posed to their business by their customers. Customers who utilize the internet and mobile-centric products and services offer a unique risk to your business, requiring organizations to implement additional controls to mitigate customer risk. The catch is that most businesses can- not mandate controls and procedures that clients must follow outside of the controls implemented within products used by the customer. Depending on your business, there are (typically) two dif- ferent types of customers: • Commercial Customers (B2B) — other businesses do- ing business with your organization. Commercial cus- tomer risk is increased if businesses perform financial transactions through your product or service, as more potential individuals may have access and available funds are typically greater. • Consumers (B2C) — individuals who utilize your online-based products and services. Consumer risk is typically lower due to limited access and fewer avail- able funds. Customers Have Less Security More often than not, businesses (particularly those in regulated industries) have stronger cybersecurity controls in place than customers. Think about your customers — com- mercial or consumer — and ask yourself who has stronger cy- bersecurity controls? If you are not the winner of that debate, it may be time for some cybersecurity assistance.