newsletter-cl-2024-02

4 ways to check whether your company is prepared for cyber-threats

rh_admin — Mon, 16 Jan 2017 16:00:00 +0000

4 ways to check whether your company is prepared for cyber-threats rh_admin 17 January 2017

As new enterprise technologies spread, businesses across multiple sectors are coming to terms with a growing and rapidly evolving landscape of cyber-threats.

According to Robert Half's Cyber-security report, 69% of Hong Kong CIOs say the number of detected security threats has increased compared with 12 months ago.

This coincides with a 38 percent increase in detected security incidents and cyber-threats in Hong Kong compared to last year, according to a PwC survey – an upward trend that is being seen around the world.

With much of this risk associated with 'third platform' enterprise technologies such as cloud computing, mobile devices and data analytics, many businesses are having to adopt new strategies in their fight against cyber threats. So how can you ensure that your company is protected against cyber-threats in today's technology-intensive business environment?

DOWNLOAD OUR CYBER-SECURITY REPORT

1. Review your security policies

From email phishing scams to ransomware to malicious websites, it is important to stay updated on the latest types of cyber-threats and scams that are going around, and to train your employees in how to recognise them. An all-too-common problem is employees using the same password for all their different accounts, as it only takes one password being stolen to expose all of their data. Of course, having a strong and unique password for each account may be difficult to enforce. One way around this is to use the approach of security expert Bruce Schneier, which is to take a sentence you find particularly memorable, and condense it into a sequence of letters and numbers that is difficult to crack.

Keep in mind that your IT security strategy affects everyone in the organisation. Therefore, staff training on cyber-security needs to address both external security threats as well as internal best practices relating to data security and privacy.

2. Audit and update your systems

One of the easiest and most effective ways to stay prepared for cyber-threats is simply to ensure that your network and computing devices are kept up to date. Don't ignore security notifications and alerts being sent from your operating systems, anti-virus software, web browsers and firewalls, as waiting until later to apply them can leave your data and networks vulnerable to hacks and malware. It can also make your IT infrastructure more vulnerable to advanced persistent threats (APT), which take advantage of neglected security holes to steal data over a long period of time while remaining undetected.

A bring your own device (BYOD) policy that allows employees to bring their own laptops, tablets and smartphones to work creates significant security risks and challenges in terms of securing your corporate data. A survey commissioned by Robert Half found that while 74 percent of companies allow employees to access company data on their personal devices, only 56 percent ask employees to sign an acceptable usage policy that protects company data, and 51 percent deploy secure mobile device management technology.

Providing employees with appropriate training on personal device security, alongside technology-based solutions such as maintaining an app blacklist and encrypting company documents, can help to mitigate BYOD risks.

3. Enhance your cloud security

This risk can be reduced by encrypting your data before uploading it to the cloud, or by using a cloud service that encrypts it by default. Also ensure that you use strong cloud passwords that are changed regularly, and take advantage of two-step verification options – such as requiring an SMS code along with a password to log in at the beginning of each day.

4. Hire security experts

The escalating cost and frequency of cyber-threats has resulted in an increasing number of companies forming their own teams of cyber-security experts, in order to preemptively discover and track security problems in their IT infrastructure. Although this can be a significant expense, it's worth weighing it up against the money, frustration (and reputation) it can save you down the road. There is also the option of training up your existing IT professionals, or using the services of contract IT professionals or external consultants.

Prepare your business against cyber-threats now

Every industry sector is facing a growing cyber-security threat, with digital security company Gemalto estimating that more than 700 million data losses or thefts occurred worldwide in 2015 alone.

Rather than waiting for a cyber-attack, it's much more sensible to assume that one will happen, and plan accordingly. By having the right tools, people and training programs in place, your company will be much better prepared for the worst when it occurs.

What is staff poaching and is it a good idea?

rh_admin — Tue, 30 Aug 2016 00:21:29 +0000

What is staff poaching and is it a good idea? rh_admin 30 August 2016

Poaching staff from a competitor can appear to be a smart business strategy, simultaneously boosting your prospects while stealing talent from a competitor.

It might be good for the bottom line today, but is it a sustainable strategy?

On the plus side, there’s potentially a boost to revenue, sales, customers and leads when one of your competitor’s employees joins your team bringing their experience, client list and reputation.

At least that’s what you’re thinking when you make the bold move to buy your opposition’s trade secrets and expertise.

But have you considered what are the inherent risks of poaching employees, particularly from competitors?

Is poaching staff ethical? Is it legal?

Many believe that, at best, the practice is unethical. At worst, you’ll find yourself entangled in restraint of trade clauses that restrict who the employee can work for and how much of their knowledge they can share.

The good news for those determined to poach is if you’re prepared to go to court, restraint of trade clauses are not always binding. In some cases, the courts have found them overly restrictive of an employee’s work opportunities and struck them out.

The bad news is that it doesn’t happen often. It’s more likely that your new employee will find themselves in court, and if you help fund the case, you might come in for judicial attention as well.

Damages awarded to former employer

And there’s more bad news waiting for the firm that poaches. A new employee parachuted into a position doesn’t perform as well as someone promoted from within. Management professor Matthew Bidwell also found that ‘external hires’ are paid up to 20 per cent more than internal candidates, and they’re more likely to resign.

Avoiding the pitfalls of poaching employees

Despite the many negatives associated with poaching employees your competitors, you may be faced with no alternative – perhaps a key employee has left or there’s been a boom in sales.

You can avoid some of the pitfalls by carefully checking the potential employee’s contract and obtaining legal advice. It may also be a good idea to prepare your existing staff by explaining your decision and being sensitive to any concerns they may have.

But for the future, a useful exercise could be to identify roles and skill sets within the organisation that are vulnerable if you lose key staff. Based on that information, a succession plan that includes staff training and planning other risk-management activities may help to keep you prepared.

SEND US YOUR JOB VACANCY

How to encourage humour in the workplace

rh_admin — Sun, 21 Jun 2015 02:20:05 +0000

How to encourage humour in the workplace rh_admin 21 June 2015

There’s a time and a place for everything, especially in the company of your colleagues. As for making people laugh, there are productive ways to do this in your office. Use these tips to encourage a belly laugh now and then.

Set the stage

Whether you’re a senior manager or part of the team, if you feel it’s important to lighten the mood or boost morale, lead by example. Do it yourself and others will follow. Go ahead and bring up the fact that humour is a beneficial workplace tool in a weekly WIP or staff catch-up.

Know your audience

Be sensitive to the crowd around you. If you are telling jokes or engaging in repartee, remember to refrain from using offensive language or references to religion, ethnicity, gender and sexuality.

Don’t force it

People can see through overzealous attempts to get a laugh. If you’re trying too hard to be funny, your humour will fall on deaf ears, and you’ll hurt your reputation. If you’ve seen the TV series The Office, you already know what not to do.

Ease tense situations

When you use it well, humour can potentially diffuse an argument, alleviate discord between co-workers and prompt employees to relax and see the lighter side of the situation.

Be self-deprecating

Workers love it when bosses or more senior team members take the mickey out of themselves. It’s a win-win situation. Your team gets a laugh and they also feel like you’ve brought yourself down to their level by mocking your own self-importance.

Apply humour to situations, not people

Even if you’re sure your team has a shared foe, it’s never wise to mock that person just to get a laugh. First, you never really know what people think of others, and second, six degrees of separation are more like three degrees in the working world, especially within close-knit industries. Finally, do you really want co-workers to perceive you as the type of person to mock others? Use humour to lift people up, not put them down. This rule applies whether or not that person is in the room.

Be a leader, not a comedian

As a leader, your position on the ladder virtually guarantees a laugh. But you need to know when to stop. Even if it seems like everyone loves your work, don’t confuse being a leader with being a comedian. Your primary role is to lead the team, and part of that role is to create a happy, relaxed work environment in which humour has a time and a place.

While there are many times when the office needs to be a place of serious business, humour in the workplace is vital to lift spirits, increase staff motivation and keep your troops happy.

What tips do you have for encouraging humour in your workplace?

DOWNLOAD OUR WORK HAPPY REPORT

This article originally appeared as How to encourage humour in the workplace on the Robert Half Australia blog.