The Necessity of Security Education for Employees in Business

This essay explores the critical need for businesses to invest time and money in educating their employees on security matters, highlighting the increasing importance of digital technology and human interaction in information systems. It emphasizes that while technology plays a role in security, human error and lack of awareness are often the weakest links exploited by cyber attackers. The essay discusses how data breaches and cybercriminal activities necessitate employee training in various security techniques, including cryptography and network infrastructure knowledge. Furthermore, it points out that even non-IT employees need to understand basic security practices to foster a strong organizational security culture and improve overall IT management. The essay concludes that while training alone may not be sufficient, it is a vital step in making organizations more secure by educating employees about fundamental security measures.

[School]
[Course title]
information system
Student Name

P a g e | 1
It is important to understand that humans and technology interact in all information
systems. Why do you feel businesses must spend time and money to educate their
employees on security matters?
The development seen in digital technology has become a key driver within present
market due to its influence in commercial sector requirements like competitive innovation for
which more companies file for patents and other security measurements to protect their
technological developments. The application of technology and human interaction in
information system (IS) holds much potential in bringing advancements to understand and
facilitate human-computer-interactions while employees share critical information with the
help of internet. Human development, on the other hand holds a parallel nature within
conservation sector that has made proliferation of technology and innovative development
and thus it can be considered that educating employees with technological advancements is
the most significant requirement of today’ businesses to reduce replication and failures in
company’s security matters (Bourgeois & Bourgeois, n.d.).
According to a cybersecurity director from UK, "It is a myth that technology will
protect you," and cyber attackers do not spend much time or money in defeating one’s
technology since they purposely attacks and exploits others security matters (Caldwell,
2013). Furthermore, in todays fast development world, deployment of technology has become
even more crucial and fundamental for business organisations due to which they consider
spending their valuable time and money in giving their employees training on security related
matters. Huntley (2016) finds that cybercriminals and hackers are always after one thing i.e.
access to organisation’s critical information. Data breaches are occurring every moment that
has made many companies increase their dependency on technology and information system
management while conducting everyday operations. However, in doing so, companies store
their personally identified information (PII) in certain networks that proves very valuable for

P a g e | 2
hackers. This is the place where the businesses need to educate their employees about various
techniques that can potentially secure their internal networks that can be unknowingly hacked
into.
Earlier, network protocol was designed to support totally different environment that
are faced by today’s organisations and often not paying much interest in it, makes them face
issue related to cybersecurity and malicious activities. IT networks becomes more critical
when both system administrators and other employees have limited knowledge regarding
networking infrastructure. For instance, the system administrator is not sure about utilisation
of effective encryption system or does not apply recommended patches within required time
period or mises to implement security filters while connecting with outside networks.
Cryptography is one essential tool that is extensively used by businesses through which only
intended users can get appropriate keys for decrypting data. A survey conducted by Computer
Security reveals that 71% of companies used this technology for their data transit. The
potential use of this this technology in human-computer-interaction can act as an active
agenda that can be involved by organisations through getting their employees educated by
certified authorities (Jaccard & Nepal, 2014).
As businesses are increasingly getting targeted of security breaches, they need to pay
more attention to information security systems and to ensure establishment of quality in IT
management, it is significant that every employee, including non-IT department ones
understand the security related practices in workplace. However, training itself may not prove
sufficient many times as trainers do not always have complete resources that can be utilised
during follow up sessions. Nevertheless, educating every employee concerning basic security
measurements is very essential that can support slow adopters also to make organisations
more secure (Tashea, 2015).

P a g e | 3
References
Bourgeois, D., & Bourgeois, D. T. (n.d.). Chapter 1: What Is an Information System?
Retrieved from https://bus206.pressbooks.com/chapter/chapter-1/
Caldwell, T. (2013). Risky business: why security awareness is crucial for employees.
Retrieved from
https://www.theguardian.com/media-network/media-network-blog/2013/feb/12/
business-cyber-security-risks-employees
Huntley, M. (2016). 5 reasons why your business should invest in security certifications.
Retrieved from https://www.mdsiinc.com/company/news/5-reasons-why-your-
business-should-invest-in-security-certifications/
Jaccard, J. J., & Nepal, S. (2014). A survey of emerging threats in cybersecurity. Journal of
Emerging Threats in Cybersecurity, 80(5), 973-993.
Tashea, J. (2015). Why strong organisational security culture matters (and how to create
one). Retrieved from https://mobilisationlab.org/stories/why-strong-organisational-
security-culture-matters-and-how-to-create-one/