More stringent requirements for IT security but companies lag behind – this is what to prioritise to improve security at your company

Despite more stringent requirements for IT security, several surveys show that companies are lagging behind. Many simply do not take the threat seriously – if they are aware of it at all. What should companies do? Dennie Karlsson, Group CISO at Dustin, has three pieces of advice that companies should follow to improve their IT security.

Carry out a continuity analysis
“Even if the company lacks a security department, you need to understand what the current level of security is. That’s why it’s important to carry out a continuity analysis of operations and see where the gaps and challenges are,” says Dennie Karlsson. He continues:

“Assess the level of security and use it as the basis for a continuity plan. Every company should reflect on issues like what would happen to the business if IT were shut down for an extended period, how long they would last without IT or the risks they’re willing to take.”

Identify valuable data and how you can protect it
Generally speaking, all companies have some form of valuable data, but not all of them have identified it and many lack a plan for how to protect it.

“Ask yourself which data you have that is valuable for the company and how you’re protecting it. It’s important that companies understand their risks so they can make informed decisions,” says Dennie Karlsson.

Awareness and attitude
Dennie Karlsson also wants to promote awareness and attitude regarding security, stressing that it is important for companies to actively work with these aspects.

“IT security isn’t an obstacle or expense but serves as an enabler if it is carried out in the right way. See it as something that enables business and make it a driving force. It’s better, and more effective, to make small changes on a regular basis than large one-off initiatives. For example, this could involve using a password manager or introducing the STAR (Stop, Think, Ask, and Report) method,” concludes Dennie Karlsson.