Top 10 Rules for Building a Strong Security Culture at Your Business
With a cue from David Letterman, by using these 10 simple behaviors you can add to your company's security posture.
October 08, 2018 at 07:00 AM
4 minute read
Building a strong security culture for many companies can seem insurmountable, but there is an answer to this by using one of the props from late night television show host David Letterman leaned on—the Top Ten List. Here's my list of Top 10 Rules for Strong Security:
1. See something bad or unusual? Immediately contact your company's security team to report it. Your timely reporting of an unusual email or event may be the difference between your company's network and security infrastructure withstanding an attack rather than succumbing to a zero-day exploit.
2. Always do the right thing when it comes to cybersecurity at work. Everyone has a part in keeping your company secure. Don't try to bypass that security mechanism set up to stop certain actions from being executed.
3. Think before you click. Did you know that, according to IBM research, more than 91 percent of all data breaches start with a phishing email? If something doesn't look or feel right in an email, report it immediately to your security team. If it's from someone you don't know, be aware not everyone wants to be your friend, you can ignore them. Relax when it comes to responding quickly—you don't have to reply right away, even if the email looks like it is from your CEO. If they want to get in touch with you immediately, they will call you!
4. Be aware of your surroundings while at work. If your floor has restricted access, don't assume people won't sneak in behind other people through an open door. If your company has a badge that people should wear, and if you see someone without one, ask nicely for them to show it to you. Physical theft of equipment and intellectual property can happen anywhere, even in secure areas inside of a building.
5. Like that your Facebook or LinkedIn profile gets so many views? In your personal social media, don't post too much information about yourself or the work you do for your company. Hackers prowl social media sites to find more information about potential targets. They love to get the inside scoop of what's going on inside your company.
6. When in public, don't talk about your company's sensitive information over the phone or in person. Even if you are in a different city or country, don't assume it's safe. (Sensitive information refers to details about your company and projects you're working on. Details of your visit to the dentist? That's up to you.)
7. Create long, strong passwords (think 20-character, length is your friend). Do not write them down, ever. Say no to yellow sticky notes! Use two-factor authentication to log in, this will really knock your security up a notch. Do not be a creature of habit by reusing passwords, in whole or in part—it's just not smart! In your personal computing, consider using a password manager to store all your unique and completely different passwords. (Pro Tip: Keep your work passwords and your personal passwords different. This eliminates or at least reduces the chances your company will be compromised if your personal password is stolen.)
8. Lock your screen when you step away from your machine. Keep a clean desk and clean off all documents. This keeps prying eyes out of your work and keeps your data secure. You don't know who might be walking by your desk at night. Also, don't rely on a locked office door to protect your data, cleaning people or maintenance workers have keys to everywhere.
9. Keep your operating system, browser, and other critical software up-to-date. Updates only take a few minutes and they help keep your equipment and software secure.
10. Don't assume you are not a target for hackers. Everyone is a target. In many companies, people are given implied trust and access inside the network. Because of this, you must be careful. You don't want to give a hacker a foothold into your network. Should you accidentally click on a link or give out information, contact your security team immediately!
By using these 10 simple behaviors you'll be adding to your company's security. Be sure to remember to use them every day!
Linda McGlasson is a member of Relativity's Calder7 security team. In her current role on Relativity's Calder7 security team, Linda is in charge of implementing and spreading security awareness across Relativity's more than 850 employees.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllTrending Stories
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250