By Christopher Moschella, CPA, CISA, Risk Advisory Services Senior Manager
Chris Moschella, Risk Advisory Services Senior Manager, shared his insights on small business cybersecurity and how to minimize the risk of Human Resources department data breaches including W-2 scams in Inspiring HR‘s article, Small Business Cybersecurity: Experts and Non-Experts agree…and Disagree.”
Excerpt:
Are you tired of hearing about data breaches yet?
Thought so. It seems that the monthly data breach story has turned into the weekly data breach story. As our systems grow more complex, and we further integrate into the digital world, there are more opportunities for our sensitive data to be stolen. Additionally, cyber criminals are finding new ways to monetize their illicit activities, such as through ransomware and illicit Dark Web marketplaces where stolen data can be bought by identity thieves and sold by hackers. As a result, cybercriminals have never had so much opportunity and monetary incentive for their activities. So, for the foreseeable future, we can expect to see more of the same.
Unfortunately, Human Resource departments make great targets for cyber thieves because of the sensitive employee data they store, which may include:
- Personal Health Information
- Personally Identifiable Information
- Payroll data
- Employee performance ratings
- and more
Access Full Article.
For more articles on Small Business Human Resources concerns, read more on Inspiring HR’s blog.
Additional Cybersecurity Resources:
- SOC for Cybersecurity: An Answer to Leadership’s Cybersecurity Responsibilities
- Five Reasons Why Your IT Outsourcer Isn’t Keeping You Cyber Secure (and neither is your internal IT team)
- Infosecstack: Your Collection of Free Cybersecurity Resources
- Cybersecurity: So You Think You Have A Breach
- Cybersecurity: Educate and Motivate Staff to Be Careful
- Download Cybersecurity Resources
About the Author
Christopher Moschella, CPA, CISA, Risk Advisory Services Senior Manager
Chris is a Senior Manager in Keiter’s Risk Advisory Services. Chris has a strong combination of IT skills, which range from IT audit and internal control assessments, including general computer controls and application controls, to full stack web development. Most recently, Chris developed a Cybersecurity web application that assesses an organization’s resistance to social engineering attacks. Chris shares his cybersecurity insights on our blog.
More Insights from Christopher MoschellaThe information contained within this article is provided for informational purposes only and is current as of the date published. Online readers are advised not to act upon this information without seeking the service of a professional accountant, as this article is not a substitute for obtaining accounting, tax, or financial advice from a professional accountant.
