The importance of cyber security

In the coming weeks, all staff will be required to do some mandatory cyber security training. The importance of this was brought into sharp relief this week, when I was very nearly the victim of a cyber-attack.  It’s apparently called a “whaling attack” which is not a great description so soon after Christmas when I’m trying to lose the effects of the big meals over the festive season. Apparently it’s to do with tricking the “big fish” in an organisation to do something.  In essence, somebody managed to emulate my email without hacking the account and asked Andy Burns, our Finance Director, to pay an invoice immediately.

Thankfully Andy had the presence of mind to ask me a couple of questions face to face, and I was able to confirm that I had not sent the original message.  That said, the message was quite convincing, even using my turn of phrase, and it took some time to discern that it had come from an AOL account, and not my work account as the header suggested.   It’s a reminder to me that we all need to be very careful, and I will be making a point of paying particular attention to the Cyber Security Training.

Many of us have been getting to grips with the new MyHR and MyFinance systems over the past few weeks.  In the main, by which I mean 99% plus, it is going well, but there have been niggles which will need us all to put a bit of effort into solving.  The most obvious one has been the need to initiate purchase orders in MyFinance before making a purchase.  It’s pretty straight-forward, but it is a change of process as well as a change of system, which has caught some people out.  The Finance team is working with the business to resolve the outstanding invoices, but all of us in the management structures need to do our bit – I’m particularly grateful to the Change Champions for dealing with the problems so effectively and with such good humour.

The good news is that the system is intelligent, and once it has learned something, it will be there the next time that you have to do something.  One of the other benefits of bringing managers into the approval of invoices is that it has made us all realise where we can do things better and save money.  For example, as a result of realising how we order stationery, we are re-negotiating our contract with our major supplier to ensure that we don’t have individual invoices and delivery charges for each order.

Tags: , , ,

Leave a Reply