What Psychology Can Teach You About Cybersecurity

/in /by

On the surface, psychology and cybersecurity may not have that much in common. Upon closer examination, both psychology and cybersecurity are intricate systems that analyze the vulnerability and logic of a particular network or structure. The security and stability of each structure rely on the strength of your analysis, critical thinking and consistent maintenance. Psychology looks at our brain chemistry, personality, thoughts and social behaviour. Cybersecurity looks at the infrastructure of our computer networks and defence systems. To ensure systems are in good health, both psychology and cybersecurity professionals require expertise, insight and ongoing professional development through cybersecurity courses or other continuing education courses. 

What Psychology Can Teach You About Cybersecurity

Methodical Processes 

How do you approach a problem or vulnerability in the system? Both psychology and cybersecurity require a methodical process and careful analysis to find an appropriate, sustainable solution. Your process should typically include the following steps: 

  • Investigate a vulnerability or challenge within the system 
  • When appropriate, identity and diagnose the problem 
  • Document the investigation and your findings 
  • Brainstorm possible solutions and action items 
  • Implement a solution to support the stability and effectiveness of the system 
  • Create an action plan for ongoing maintenance and support 
  • Revisit the vulnerability as needed to ensure ongoing effectiveness 

Social Engineering 

Why is it helpful to learn about psychology and behavioural theories in relation to cybersecurity? Consider the power of social engineering. In their article about the social psychology of cybersecurity, authors John McAlaney, Helen Thackray and Jacqui Taylor argue that “cybersecurity attacks are increasingly based primarily on social engineering techniques.” What does this look like in practice? Phishing emails and online identity theft are perhaps the most obvious examples of social engineering in the context of cybersecurity. These types of scams play off our natural fears, creating a sense of urgency and panic which seems to require immediate action. The resulting fear increases the risk of human error. McAlaney, Thackray and Taylor argue that the phenomenon of social engineering relies on “the use of psychological manipulation to trick people into disclosing sensitive information or inappropriately granting access to a secure system.” One of the greatest vulnerabilities in any cyber defence is human error and manipulation, regardless of how strong your network is. 

Global Perspectives 

The reality of social engineering as a threat to cybersecurity is echoed by academics from around the world. In an article on dissecting social engineering, Finnish educators Pekka Tetri and Jukka Vuorinen identity three distinct areas of social engineering that affect cybersecurity measures. They pinpoint nefarious attempts to persuade, fabricate, or collect sensitive data as key examples of social engineering, leading to human error and data breaches. On the other side of the world, researchers from the Chinese Academy of Sciences recently published an article with the goal of defining social engineering in cybersecurity. In the publication, computer science experts Zuoguang Wang, Limin Sun and Hongsong Zhu argue that “social engineering has posed a serious security threat to infrastructure, user, data and operations of cyberspace.” Their argument emphasizes the power of social engineering to influence users and impact the overall structure and stability of a network. Wang, Sun and Zhu also warn that the danger of human error “is universal, and independent of platform, software, network or age of equipment.” That means you can have all the latest software and gadgets, but you will still need to educate and support your team to reduce your overall risk and ensure an adequate cyber defence. 

Building Insight and Expertise 

To combat the rise of clever social engineering techniques, your organization or team will need ongoing education and development. There are many options out there, including the foundational CompTIA a+ certification training, security+ certification, network+ certification training or the more advanced cysa+ certification training. Upskilling in cybersecurity is particularly important for business leaders and senior managers because it demonstrates your expertise and enables you to better support the team. 

Remember that understanding social psychology can broaden your cybersecurity perspective and help you to better defend your organization or business. When you develop your cybersecurity plan and determine a budget, remember the importance of a methodical threat assessment process and the logical implementation of sustainable solutions. 

Check out our previous blog: Times Pop Culture actually understood Coding

Benefits of EA Practicum

How a Practicum Benefits Education Assistants

/in /by

Gaining an education is important before entering most career fields, but without any hands-on exposure to the job itself, there can be a disconnect when the education component is complete and it’s time to find your place in the work force. While some occupations are able to provide this hands-on aspect within the education environment, others require a practicum for students to get a solid feel for what their career may be like.  

Education assistants have found their practicums invaluable to their future. This is why Ashton College has made a practicum an integrated component of its education assistant courses. Students find the practical, in-person learning ideal for a variety of reasons:  

  1. Theory is essential to learning an occupation, but it does little to help you understand how that theory is applied in real-life scenarios. While a practicum can’t possibly expose you to every potential career situation, it can certainly give you a much better feel for how your education is applied in an on-the-job format. You’ll also gain a feeling for how to apply that learning. For example, students with similar challenges may need similar support, but where one may excel with an “I do this with you” approach, another may prefer to have the tools laid out for them and they figure out how to use them to create the support they need as you provide guidance from the background.  
  2. Practicums are conducted in organizations filled with those in the career you are pursuing. You are going to meet a wide range of people in your EA program and you will meet more people in your practicum. This exposes you to those who will be and already are in the field. Not only can this provide the support you need from others within your field, it can also help you create connections for the various levels of your career. Having a solid network of professionals in your field is essential for ongoing career growth.  
  3. Experience gives you the understanding of your field to help you narrow down your preferences. While you may already know that you want to work children age 6 to 13, you may not know that you tremendously enjoy working with those who have Down Syndrome. Being aware of this alignment to a specific aspect of the education assistant field will give you the opportunity to specialize in both your job choices and career and also in your future education choices. That last point, about future education, takes us to another benefit of a practicum: 
  4. Undertaking a practicum allows you to determine if it’s time to head out into the work force, or if you’d really like to add more education to your portfolio of learning. Or perhaps, integrating both by working while taking more education is the best fit for you.  
  5. Within a practicum, you will be able to apply your learning and make mistakes before you enter the work force. The organizations who take on practicum students are fully aware that, in most cases, they will have someone working with them who has limited to no hands-on experience. They know that there will need to be guidance and training provided as part of the practicum experience. In essence, a practicum is an adjunct to your formal education and one that gives you essential experience that is directly fitting for the jobs you’ll be considering once you graduate from your education assistant program.  
  6. Perhaps one of the most important benefits of a practicum is that they give you regular and direct interaction with students. This ability to relate to students on a personal level can be the fuel that gets an education assistant through a challenging day. You will be able to recall the times when you first met a student with a certain challenge and recall how important it was to get to know them as a person in order to help them grow.  

Having a practicum is an important aspect of many education programs and for future education assistants, it’s definitely a component to look for when selecting a school. Take full advantage of what you learn in your practicum. Volunteer for more opportunities and continue to treat it like the education it is – it can only benefit your career. 

Read our other blog: Times Pop Culture actually understood Coding

Times Pop Culture actually understood Coding

Times Pop Culture actually understood Coding

/in /by

If you’ve read this blog for a while, you’ll know that at Ashton College, we feel pretty strongly that the 1983 movie with Matthew Broderick, War Games, was the first REAL movie about hacking. If you can get past the fact that it was made almost 40 years ago, you’ll likely have a chuckle at some of the references and enjoy the movie none-the-less. 

 While it’s somewhat unclear if Broderick’s character engaged in any computer programming to mistakenly access the War Operation Plan response (WOPR) (he mostly entered passwords, made use of DOS commands and hacked systems through undisclosed means), it was the first movie of its kind and one that led to many others about life with computers and the hazards (or opportunities). It also inspired “geeks” from around the world to be proud of their interests in computing.  

 Movies and TV have taken things in new directions as computers have evolved and so has hacking, programming, etc. The phrase “I have Python certification” in the days of War Games would have led movie-goers to think “Wait, why is he certified in snakes?” whereas now, it would be generally understood the character had programming skills and would have probably taken a Python for beginners course. 

In that vein, here are a few of our other favourite movies that inspired programmers and portrayed their skills fairly accurately. 

1. The Social Network  

Welcome Mark Zuckerberg and the advent of Facebook. Based on the true story, the movie explores Zuckerberg’s legal battle over intellectual property theft and how Facebook came to be on the computers and phones of everyone from tweens to grandmothers.  

There are minimal segments that show programming, but those that do are done well. References to coding, algorithms and the pains of a tech start-up abound throughout the film, which helped it earn fairly high praise.  

2. Pirates of Silicon Valley 

Another throwback, though not quite as far back as War Games, Pirates of Silicon Valley came out in 1999. This is more of a personal events exploration (and a somewhat humourous one) of the formation of the personal computing industry’s leaders – Steve Jobs and Bill Gates – and their rivalry. The mention of BASIC programming language (used on Bill Gates’ Altair computer) is part of the film’s appeal.  

3. Source Code 

Perhaps the most programming-specific titled movie out there, this was a 2011 action thriller based on the concept that a military artificial reality system can determine and prevent a suicide bomber on a Chicago train. Source Code is the name of the experimental machine that recreates past events based on up the last eight minutes of memory of the passengers killed on the train.  

It sounds very sci-fi, but keep in mind that at one time movies about robots and AI seemed far fetched. There’s a lot of questions about what Source Code (the machine in the movie) is and what it does while watching the movie, but without throwing out spoilers, we’ll just say it’s definitely worth a watch.  

 4. Antitrust 

Programmers are the main characters in this 2011 film and while programming is highly featured, those in the industry will easily spot fake GUIs placed in the movie. Fortunately, these issues are minimal and in Antitrust we see a bright computer programmer join a disturbing employer’s ranks. While he sees his employer as his mentor, he soon begins to notice things that aren’t quite right and uncovers secrets that lead to a lack of trust and the need to dig deeper.  

Code features heavily in this film where the origins of necessary source code are kept secret from the main character and programmers who create code are being killed. It’s a high-stakes life-and-death look at the programming and software world and whole lot of fun.  

If you’ve been wanting to check out a film or two that feature programming and the world of sharp minds, inside jokes and brilliant geeks, there are plenty, but we suggest starting with these five. And yes, please do start with War Games. 

Read our other blog: Most Effective Spends for a CyberSecurity Budget

Cybersecurity Budget Spend

Most Effective Spends for a CyberSecurity Budget

/in /by

Every company has budget limitations. Whether it’s thousands or tens of thousands, there is always a limit. The very nature of cybersecurity means that even a mid-sized company could spend millions in order to get everything required to prevent cyber attacks, data breaches, malware, ransomware and other attacks. Millions aren’t the standard option so it’s time to better understand where to prioritize the budget for the best result that minimizes loss. 

 It’s true that a cybersecurity breach can cost up to $4.5 million US for Canadian companies. That’s the average cost of a data breach in the country, but millions don’t need to be the target for expenditures to control that loss. While cyber criminals are growing more and more sophisticated, so too are those who take cybersecurity courses to better understand where to target hacks and breaches.  

Those in IT who add education like CySA+ training courses quickly learn ways to target the spots that cybercriminals look to, to access data, insert malware or otherwise create havoc. IT professionals with this kind of knowledge can help create a more effective cybersecurity budget.  

First, look at the effectiveness of cybersecurity controls  

Take a look at what you currently have in place to stop cybercrime. If your team isn’t as up-to-speed as you would like, encourage additional education like Security+ certification courses or other options that bring awareness to how to better control breaches and security issues. With the right background, IT team members will be able to objectively look at the cybersecurity activities and assess their effectiveness in an ever-changing world.  

Cybersecurity is going to change more rapidly than any other area in IT. This makes designations like A+ certification even more important in team members. By having education behind them, your IT team will be able to look further into the future – not just at today’s issues – to assess what needs to be done to protect a company’s data and digital assets. 

 It will take a significant amount of team effort to determine what is working and what isn’t in the existing organizational controls, but it’s essential to understanding how to improve what exists. This is the first and most important part of a budget – establishing a benchmark. 

Second, vulnerabilities, patches and immediate identification must be a priority 

When it comes to budget, staying on top of the access points is the biggest priority. This can be done through a variety of means and the affordability varies, but the essence comes down to an ongoing scan and identification of vulnerabilities, patches of potential weak spots and immediate identification of any unauthorized access.  

It’s a mix of proactive and reactive, but that’s the world cybersecurity lives in. There needs to be a balance between blocking cyber criminal access and accepting that their continuous technology advancements may allow for entry. Things like a network+ certification course can help IT professionals better understand this fine line between prevention and identification of unauthorized access.  

Both prevention and identification are needed in a cybersecurity budget because even the best IT personnel can’t possibly see everything that’s coming and can’t predict the tools that cyber criminals create. It’s an ever-changing world and budgets must need to reflect an acceptance of this balance.  

Third, employees must be educated about vulnerabilities and their role 

It’s often been reported that employees are the weakest point of cybersecurity. An IT team must make sure that they work together with other departments in order to establish the protocol and best practices that reduce security vulnerabilities organization-wide. 

Education and awareness are absolutely key, especially in an increasingly remote workforce. How to handle corporate logins and app access when using a public network is just one of the many, many educational topics the IT team can share with the organization. It takes IT professionals who are savvy about the potential for employee error that causes access balanced with communication skills to ensure the organization knows their role in the overall picture of cybersecurity. It’s the mix of identification of cause and effect and training that will benefit the organization overall. 

Workshops, newsletters and other engaging forums that train employees are an important element of a cybersecurity expenditure.  

Fourth, and perhaps most important, stay on top of it 

This is absolutely not a set-it-and-forget-it type of activity. Cybersecurity is going to continue to evolve. It’s important that IT teams work through their budget and priorities on a quarterly basis rather than an annual one. Cyber criminals don’t work on an annual cycle – they are constantly building and evolving new tools to hack into data, take command of websites and hold things ransom. This continual diligence is where cybersecurity courses come into play. Individuals in the IT department need constant upgrade to their education to make sure they are on top of the latest advances that protect and organization.  

Read our other blog: Taking Advantage of the Bean-Counter Shortage

Accounting – Global Talent Shortage

Taking Advantage of the Bean-Counter Shortage

/in /by

This isn’t a news flash, but it’s sure as heck a shot fired over the bow for people in the accounting world to pay attention to, if they haven’t been already: In 2019, CPA Exam candidates were the lowest number they’ve been for more than a decade.  

That fact alone may not sound terribly concerning, after all, not every business needs a CPA. Let’s put it into context though; the bigger picture reveals that it isn’t just CPAs who are in short supply. The current talent shortage is unfortunately a reality for many (most) of the roles in the accounting field from entry level to accounts receivable managers and CPAs to CFOs. These positions are going vacant in both accounting firms and organizations that are in need of team members for accounting departments. For those struggling to hire accounting staff, things are feeling dire. No longer are there hundreds of qualified applicants for a single job posting.  

 In the 2020 ManpowerGroup Talent Shortage Survey, globally, accounting and finance roles ranked seventh out of the 10 hardest positions to fill (eighth here in Canada). Imagine trying to run a company without people who have the acumen to look at the numbers, analyze data and make key financial decisions. It’s a frightening spot to be in from the hiring side of things, perhaps even more scary for those who rely on these accounting minds to keep things running optimally in an organization.  

This does, however, present a massive opportunity for individuals who like balance sheets, finance, receivables, numbers, data and all that accounting offers. With some education and a passion for the industry, those who want to work in the accounting field have tremendous options available to them. 

Opening New Doors of Opportunity 

Education institutions such as Ashton College have long been leaders in providing accounting courses that can help individuals make a career change into the accounting field or move up from a basic, entry-level role to a more advanced one. A certificate in accounting can be what allows for a new realm of opportunities.  

Taking continuing education courses can easily permit an individual to continue in their current career while striving for a new one in accounting. If you have an interest in the accounting field, now is the time to start exploring courses and options that allow you to make the transition or step up into the career you seek.  

Why is there an Accounting Talent Shortage?  

Quick reviews of interactive sites like Reddit and blogs about the issue point to numerous contributing factors:  

  • We can blame COVID for people realizing they don’t want to commute 3 hours a day to a job they aren’t loving and they’ve realized it’s time to find something they do love. This opens the door to people who absolutely love accounting and are located in the right areas or can negotiate flexible working arrangements which many organizations have embraced thanks to COVID 
  • COVID can also be partly to blame for the mass exodus of retiring accountants; some thought they’d stick it out for a while longer until the pandemic hit and they pulled the proverbial plug on going into the office. This is again a benefit to those up-and-comers int eh field who want to establish a career in the accounting field 
  • Technology was long touted as a way to reduce accounting staff and while this has done so to a degree, the reality is that human beings are still needed to make assumptions and judgements leaving some organizations understaffed and unprepared. The end result is that human beings with accounting course knowledge are still essential and highly sought after 

Certainly there are more issues, but this illustrates there is no single thing to point a finger at for the shortage of accounting staff. Again, while this is a hardship for those seeking accounting staff, it lights the way for those who want to make their way into the field. 

Time for Creativity 

For firms that are facing a staffing shortage, there is a need for creative solutions on the inside to bring more harmony and less stress to the organization. This creativity needs to come in the form of re-considering traditional roles and individuals applying as well as bolstering hiring and retention practices. Basically, firms need to be flexible, get good people in and keep them in place.  

This repeats the message of opportunity to those who want to pursue a career in the accounting field. With few candidates in the pool, there is much more opportunity to ask for, and receive more of the perks people seek in today’s job market. This can be anything from more vacation time and a better work station to flexible work arrangements and improved benefits like advancing your education further.   

Anytime there is a talent squeeze, it’s the employers that get creative which come out for the best. These organizations are more successful in retaining great talent, they are also better at attracting more great talent because word gets out about how people are treated. Take your time as you look for your next employer because you will be in demand!  

Read our other blog: Building Your knowledge Better Supports the HR Team and Your Future