{"id":16177,"date":"2023-09-27T07:00:00","date_gmt":"2023-09-27T06:00:00","guid":{"rendered":"https:\/\/www.sage.com\/en-gb\/blog\/?p=16177"},"modified":"2023-09-27T10:05:23","modified_gmt":"2023-09-27T09:05:23","slug":"better-security-better-business-outcomes","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-gb\/blog\/better-security-better-business-outcomes\/","title":{"rendered":"Better security means better business outcomes\u00a0\u00a0"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\tTechnology & Innovation<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\tBetter security means better business outcomes\u00a0\u00a0\t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t

\n\t\t
\n\t\t\t
\n\t
\n\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n\t\t\t\n\t\t\t\t\"sophia-adhami\"\t\t\t\tSophia Adhami<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n

As we all face increasingly varied security threats, it is important to know how to drive a culture of security across all teams within a business, especially those who have such a big impact on the security of your software, products, or business operations.\u00a0\u00a0<\/p>\n\n\n\n

If you are a chief\u00a0information officer, an IT manager, security professional, or developer in a small or medium-sized business, you may be tasked with ensuring your colleagues do the right thing when it comes to security. <\/p>\n\n\n\n

This means you educate non-technical colleagues about cyber security and prepare them before any threats occur. <\/p>\n\n\n\n

You may also be creating your own products or software and want to ensure the development of these services is secure, so you can offer a reliable service to your customers.\u00a0\u00a0<\/p>\n\n\n\n

When it comes to security, especially for those in engineering or technical roles, people should feel empowered and confident.<\/p>\n\n\n\n

Watch the video below to see how Sage partnered with Pluralsight as part of our security upskilling programme to build a culture of trust.\u00a0Explore the lessons we learned along the way.<\/p>\n\n\n

<\/video><\/div><\/div>\n\n\n\n

How can you empower teams when it comes to security?\u00a0\u00a0<\/h2>\n\n\n\n

Security is more than just implementing security tools and monitoring for threats. <\/p>\n\n\n\n

Having colleagues who care about security, understand it, and value how it supports your business goals is essential. <\/p>\n\n\n\n

To support developers and colleagues who work in technical roles, you can do these three things:\u00a0\u00a0<\/p>\n\n\n\n

1. Understand their role, working life, and issues they face\u00a0<\/h3>\n\n\n\n

If you are responsible for delivering security in your organisation, spending time understanding those who feed into the technology and critical processes will be time well spent.  <\/p>\n\n\n\n

Regardless of your role, having conversations, taking short surveys, and reaching out to your organisation\u2019s developers, testers, architects, security professionals or IT managers will help you understand what issues people are facing and whether they understand your company\u2019s security requirements.\u00a0\u00a0<\/p>\n\n\n\n

Being able to see and hear how people feel, what tools they use, and why they do certain things will help you create an approach to security that is meaningful.  <\/p>\n\n\n\n

2. Engage and incentivise in a human way\u00a0<\/h3>\n\n\n\n

Once you understand how people are working and feeling, you can start to engage with them in the right way. <\/p>\n\n\n\n

This means clarifying communications channels and using those that are most widely adopted, as long as they are\u00a0secure.\u00a0\u00a0<\/p>\n\n\n\n

Establish what you think would be the best way to reward and incentivise colleagues to be more secure or adopt more secure processes. Positive reinforcement based on an understanding of what motivates colleagues will support good security and the desire to acquire more security skills. <\/p>\n\n\n\n

For example, when developing security culture among Sage developers,\u00a0we understood that their objective was to write ‘good, clean code’ when we spoke to them and found out about their challenges. <\/p>\n\n\n\n

We tweaked this to ‘good, clean, secure code’ and then supported them with training to achieve this.\u00a0\u00a0<\/p>\n\n\n\n

Have a clear idea of what it is you are trying to achieve when it comes to security, such as what do you need your colleagues to know about to support the capability you are building in your business? <\/p>\n\n\n\n

When you have this defined, then you can plan what you need colleagues to do. <\/p>\n\n\n\n

Less is more and focusing on just a couple of points will be best.\u00a0\u00a0<\/p>\n\n\n\n

3. Consider champions\u00a0<\/strong>\u00a0<\/h3>\n\n\n\n

Sage has a network of security champions who are embedded in technical teams and who dedicate 10% of their time to security. <\/p>\n\n\n\n

They have a role description, key responsibilities, and keep the commitment of 10% of their time to security as part of their objectives.\u00a0\u00a0<\/p>\n\n\n\n

Having a clear group that you can rely on for security is incredibly helpful for the security of your business and is an industry best practice.\u00a0<\/p>\n\n\n\n

You can consider allocating the management of this group to a named individual in your business and ensuring that managers are supportive and are also being supported themselves.\u00a0\u00a0<\/p>\n\n\n\n

Final thoughts\u00a0<\/h2>\n\n\n\n

Building security capability is a long-term investment. Driving enthusiasm for security through consistent training and support can sit alongside a culture of continuous learning and community building to achieve measurable risk reduction.\u00a0\u00a0<\/p>\n\n\n\n

You should check out our secure software development page<\/a> on the Trust and security hub<\/strong> for more information about some of the work of our development teams.  <\/p>\n\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t

Subscribe to the Sage Advice newsletter<\/h2>\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

Join more than 500,000 UK readers and get the best business admin strategies and tactics, as well as actionable advice to help your company thrive, in your inbox every month.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tSubscribe now<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\"\"\t\t\t<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Want to empower your teams when it comes to dealing with security? Discover 3 important steps you need to take.<\/p>\n","protected":false},"author":1728,"featured_media":11527,"menu_order":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sage_video":true,"post_featured_image_hide":false,"footnotes":""},"categories":[11],"tags":[52,125],"business_type":[4,3],"lilypad":[],"context":[],"industry":[],"persona":[70,71,73,74,75],"imagine_tag":[96,300,109],"coauthors":[636],"class_list":["post-16177","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology-innovation","tag-security-fraud","tag-workplace-technology","business_type-small-business","business_type-medium-sized-business"],"sage_meta":{"region":"en-gb","author_name":"Sophia Adhami","featured_image":"https:\/\/www.sage.com\/en-gb\/blog\/wp-content\/uploads\/sites\/10\/2022\/04\/GettyImages-643644406.jpg","imagine_tags":{"96":"Medium businesses","300":"Security Tech Leaders","109":"Small business"}},"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Sage Advice UK","distributor_original_site_url":"https:\/\/www.sage.com\/en-gb\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/16177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/users\/1728"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/comments?post=16177"}],"version-history":[{"count":0,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/posts\/16177\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media\/11527"}],"wp:attachment":[{"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/media?parent=16177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/categories?post=16177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/tags?post=16177"},{"taxonomy":"business_type","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/business_type?post=16177"},{"taxonomy":"lilypad","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/lilypad?post=16177"},{"taxonomy":"context","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/context?post=16177"},{"taxonomy":"industry","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/industry?post=16177"},{"taxonomy":"persona","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/persona?post=16177"},{"taxonomy":"imagine_tag","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/imagine_tag?post=16177"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.sage.com\/en-gb\/blog\/api\/wp\/v2\/coauthors?post=16177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}