Pub. 10 2021 Issue 1

The Commun i tyBanker 14 F E A T U R E Continued from page 13 facial recognition) authentication, encryption, anti- malware programs and Wi-Fi connectivity. • Malware awareness — Educate customers about de- fending against malicious software, including ransom- ware, trojans, spyware, etc. • Importance of antivirus and firewalls — Stress the importance of firewalls and the use of malicious program detection programs such as antivirus or anti-malware. • Security awareness — Stress the importance of ongo- ing security awareness training and staying up-to-date about modern cyber attacks. • Incident response plans — Stress the importance of corporate customers building a plan to fail well (an incident response plan) if they are compromised. How to Train Your Customers Organizations can provide cybersecurity training and education to their customers through a variety of methods. Using multiple delivery channels can help ensure your cus- tomers see this training throughout the year. Cybersecurity training and education can also provide customers a starting point or additional resources for building a strong security culture themselves. Delivery channels for cybersecurity train- ing and education can include: • Your business website (your own content, your policies for handling information or disclosing cyber incidents, cybersecurity news or articles, or links to other cyber- security training) • Posting cybersecurity resources or news on your social media channels (LinkedIn, Facebook, Instagram, etc.) • Including cybersecurity resources with physical state- ments or invoices • Providing cybersecurity resources, control suggestions (like creating strong passwords), or self-audits at the time of account opening • Conducting periodic audits of security controls at a customer’s location (especially for organizations whose products/services involve financial transactions) Actually Talk to Your Customers One of the most popular and effective methods of training your customers is to invite them to a security lunch-and-learn hosted by your organization – virtual or in-person (so long as we’re not in a pandemic). Getting out in front of your customers and talking about the importance of cybersecurity is a win/win/win: 1. You are helping to create stronger customers that are more resistant to cyber attacks, which benefits both you and your customer. 2. You also show your customers they are more than just a number to you. You’re strengthening relationships and demonstrating care about their well-being (digital and personal). 3. You also have an opportunity to show off new products/ services or new features to your customers and potential- ly increase the adoption of existing products or services. Talking about cybersecurity also offers your customers a chance to see how your organization is protecting their infor- mation. In today’s market, where cybersecurity is becoming a deciding factor for consumers presented with many options, being open and transparent about cybersecurity can instill customer confidence and draw in new customers. Whether you choose to talk with your customers about cybersecurity virtually or in-person, here are some additional considerations to keep in mind: • Invite the community: Not only should you include your existing customers, but you should consider ex- panding your audience to the community at large. • Timing: Reach the broadest audience by hosting sev- eral sessions conveniently scheduled to cover the most people possible. • Location (if in-person): Ensure the location is conve- niently accessible and big enough to comfortably host your expected audience. • Platform (if virtual): Choose a platform that is easily accessible by your customers, user-friendly and secure. • Partner locally: Pair up with your local chamber of commerce, an area civic organization, or academic institution to add additional community reach or resources. • Bring in the experts: If you’re not confident talking about cybersecurity yourself, bring in a cybersecurity expert or someone from a law enforcement agency (FBI, Secret Service, your local police department, etc.) to speak on your behalf. Choose speakers with experience in covering cybersecurity topics. Additionally, consider recording the session for those unable to attend or to use for content later. Putting It All Together Cybersecurity education of customers may be a require- ment for some industries (like financial institutions), but it is also necessary to mitigate your cybersecurity risk. Promoting a cybersecurity culture that your customers can look to as a resource can be a tremendous advantage in today’s market. Conversely, failing to provide cybersecurity training and edu- cation to your customers can open your business to informa- tion being compromised. This can snowball into the compro- mised information being used in a malicious attack against your business, which can be very costly from a monetary and reputational damage perspective. If your business is looking for cybersecurity training and education resources to share with your customers, SBS CyberSecurity has content that can help. SBS regularly publishes blog posts, articles, whitepapers, social media content, free cybersecurity webinars, and free down- loads that can be shared with your customers. Learn more at sbscyber.com/education. Cybersecurity education of customers may be a requirement for some industries (like financial institutions), but it is also necessary to mitigate your cybersecurity risk.