At least a dozen Australian enterprises have fallen foul of WannaCry – thankfully a small portion of the 200,000+ casualties across 150 countries.
ESET is offering free cybersecurity awareness training, open to anyone across the world interested in learning more about the importance of cybersecurity and how to lower the risk of being attacked. With user-friendly terminology and tips, ESET’s flexible, on-demand Cybersecurity Awareness Training covers everything employees need to know to keep data and devices safe, including:
- Threat Overview: Malware, phishing & social engineering
- Password Policies: Best practices; 2FA and how to use it
- Web Protection: What to look for; what to avoid
- Email Protection: What to look for; what to avoid
- Preventive Measures: Best practices for security at home and in business
According to Nick FitzGerald, Senior Research Fellow at ESET, the WannaCryptor ransomware attacks have been somewhat of a surprise, catching organisations off-guard. Further, they have highlighted a shortfall in cyber security measures across many sectors, from SMBs to enterprise and even government agencies.
“IT security folk, in particular, have been placed under pressure to prepare reactive warning mechanisms for untrained staff to continually be wary of unexpected email messages, especially if they contain in any way ‘unusual’ or unexpected attachments, or try to entice the reader to click on a link.”
{loadposition ray}
A registration form allows one company representative to register for an unlimited number of licenses in order to allow all staff members, individual access to the training. Everything needed to deploy the training is then sent straight to their inbox, including:
- Training overview: A walk through of training materials with a quick 2-minute video
- Downloadable materials: Download the full presentation or customize for your organisation
- Internal communication templates: Full instructions to roll out training to employees
- Certificate: Instructions on how to track and document training completion
“As in most ransomware attacks, the email distribution vector of WannaCryptor has capitalised on an understanding that most organisations will have one or more staff members who are not sufficiently trained to detect the warning signs of an attack. If more organisations offered easy access to cybersecurity training for their staff, WannaCryptor may have had little chance of success in the first place,” he said.
In the past two years alone, between July 2015 and June 2016, Australia’s national computer emergency response team (CERT) responded to 14,804 cyber security incidents affecting Australian businesses, 418 of which involved systems of national interest and critical infrastructure. For this reason, training employees on security best practices is a must.
For more information or to register for ESET’s free cyber security awareness training, head to ESET’s website. ESET has also detailed what we can learn from the WannaCryptor attacks in a new WeLiveSecurity blogpost.