At its core, sustainability is about using resources in a way that avoids exhausting them and strategically meets today’s needs, while also preparing for the needs of tomorrow. Environmental sustainability, for example, aims to conserve natural resources, such as water, forests and fertile land, so future generations can thrive.
Similarly, cybersecurity sustainability means investing time, attention and capital in a way that mitigates risk, minimizes cost and maximizes effectiveness both now and in the long term.
To put these ideals into practice, consider what sustainability looks like across the three pillars of security: people, process and technology. Here are some examples.
Sustainability and people
Most companies mandate annual security awareness training as part of their compliance and risk management programs. Too often, this means doing the bare minimum — requiring employees to passively view short informational videos, for example. Such one-and-done, box-checking exercises are typically a poor use of time and resources and fail to engage people in any active or meaningful way.
A more sustainable approach to security awareness training continuously seeks to…
