PRO+ Premium Content/Access

These days, you can do a lot of things with a click of a button: send an emoji, record your favorite TV show, order paper towels from an online retailer that ships to you within two business days. But it can also take just one click -- say, opening a compromised email or URL -- to breach a company's entire network. IT departments can combat end-user security risks by implementing malware protection, threat detection, network security tools and more. But perhaps it's more important to address the human element -- educate employees on threats and how to avoid them through end-user security awareness training. "The key is to continually keep security on the top of users' minds," said Kevin Beaver, an independent security consultant at Principle Logic. "It's all about working together with management, especially HR, to ensure that common-sense security basics … become part of the organizational culture. To simply assume that users will always make good choices is to assume that your security program has no flaws." Why you need ...