{"id":20490,"date":"2023-10-12T04:33:21","date_gmt":"2023-10-12T08:33:21","guid":{"rendered":"https:\/\/www.sage.com\/en-us\/blog\/?p=20490"},"modified":"2023-10-12T05:03:26","modified_gmt":"2023-10-12T09:03:26","slug":"better-security-better-business-outcomes","status":"publish","type":"post","link":"https:\/\/www.sage.com\/en-us\/blog\/better-security-better-business-outcomes\/","title":{"rendered":"Better security means better business outcomes\u00a0\u00a0"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\tTechnology & Innovation<\/a>\t\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\tBetter security means better business outcomes \t\t\t\t\t<\/h1>\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n\t\t

\n\t\t
\n\t\t\tPublished
\n\t
\n\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t
\n\t\t\t\n\t\t\t\t\"sophia-adhami\"\t\t\t\tSophia Adhami<\/span>\n\t\t\t<\/a>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n

How do you drive security proficiency in technical teams? <\/strong> <\/h2>\n\n\n\n

As we all face increasingly varied security threats, it is important to know how to drive a culture of security across all teams within a business, especially those who have such a big impact on the security of your software, products, or business operations.  <\/p>\n\n\n\n

If you are a chief information officer, an IT manager, security professional, or developer in a small or medium-sized business, you may be tasked with ensuring your colleagues do the right thing when it comes to security. This means you educate non-technical colleagues about cyber security and prepare them before any threats occur. You may also be creating your own products or software and want to ensure that the development of these services is secure, so that you can offer a reliable service to your customers.  <\/p>\n\n\n\n

When it comes to security, especially for those in engineering or technical roles, people should feel empowered and confident. <\/p>\n\n\n\n

Watch the video below to see how Sage partnered with Pluralsight as part of our security upskilling programme to build a culture of trust. Explore the lessons we learned along the way. <\/p>\n\n\n

<\/video><\/div><\/div>\n\n\n\n

 <\/p>\n\n\n\n

How can you empower teams when it comes to security? <\/strong> <\/h2>\n\n\n\n

Security is more than just implementing security tools and monitoring for threats. Having colleagues who care about security, understand it, and value how it supports your business goals is essential. To support developers and colleagues who work in technical roles, you can do these 3 things:  <\/p>\n\n\n\n

1. Understand their role, working life, and issues they face<\/strong> <\/h3>\n\n\n\n

If you are responsible for delivering security in your organization, spending time understanding those who feed into the technology and critical processes will be time well spent.  <\/p>\n\n\n\n

Regardless of your role, having conversations, taking short surveys, and reaching out to your organization\u2019s developers, testers, architects, security professionals, or IT managers will help you understand what issues people are facing and whether they understand your company\u2019s security requirements.  <\/p>\n\n\n\n

Being able to see and hear how people feel, what tools they use, and why they do certain things will help you create an approach to security that is meaningful.  <\/p>\n\n\n\n

2. Engage and incentivize in a human way<\/strong> <\/h3>\n\n\n\n

Once you understand how people are working and feeling, you can start to engage with them in the right way. This means, trying to clarify communications channels, use those that are most widely adopted, as long as they are secure.  <\/p>\n\n\n\n

Establish what you think would be the best way to reward and incentivize colleagues to be more secure or adopt more secure processes. Positive reinforcement based on an understanding of what motivates colleagues will support good security and the desire to acquire more security skills. For example, when developing security culture amongst Sage developers, we understood that their objective was to write \u201cgood, clean code\u201d when we spoke to them and found out about their challenges. We tweaked this to \u201cgood, clean, secure code\u201d and then supported them with training to achieve this.  <\/p>\n\n\n\n

Have a clear idea of what it is you are trying to achieve when it comes to security, e.g. what do you need your colleagues to know about to support the capability you are building in your business? When you have this defined, then you can plan what you need colleagues to do. Less is more and focusing on just a couple of points will be best.  <\/p>\n\n\n\n

3. Consider champions <\/strong> <\/h3>\n\n\n\n

Sage has a network of security champions who are embedded in technical teams and who dedicate 10 percent of their time to security. They have a role description, key responsibilities, and keep the commitment of 10 percent of their time to security as part of their objectives.  <\/p>\n\n\n\n

Having a clear group that you can rely on for security is incredibly helpful for the security of your business and is an industry best practice. You can consider allocating the management of this group to a named individual in your business and ensuring that managers are supportive and are also being supported themselves.  <\/p>\n\n\n\n

Final thoughts<\/strong> <\/h2>\n\n\n\n

In summary, building security capability is a long-term investment. Driving enthusiasm for security through consistent training and support can sit alongside a culture of continuous learning and community building to achieve measurable risk reduction.  <\/p>\n\n\n\n

You should check out our secure software development page<\/a> on the Trust and security hub<\/strong> for more information about some of the work of our development teams.  <\/p>\n\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t

Subscribe to our Sage Advice Newsletter<\/h2>\n\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t

Get our latest business advice delivered directly to your inbox.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tSubscribe<\/a>\n\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\"Working\t\t\t<\/div>\n<\/div>\n\n

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t

Browse more topics from this article<\/h3>\n\t\t\t<\/div>\n\t\t\t
\n\t\t\t\t