Investing in Technology vs. People

The 11th Ernst & Young Global Information Security survey, which surveyed 1,400 organizations in 50 countries, found that only 44 per cent of respondents were training their staff in data handling, even though they were still continuing to fund investment in security tools. The research indicates that while processes for routine security events are critical it’s ultimately the people who help ensure that IT risks are mitigated.

People are often the most essential part of any process. When the human side does not function properly—due to inadequate process or policy design, lack of skills or education—IT systems fail. However, with proper education, employees can become an organization's strongest line of defence.

Educating employees, so they understand how IT risks can impact an organization, is an indispensable step towards properly managing those risks. Organizations frequently focus on mitigating risk by investing in new technologies, while failing to leverage the most critical asset - people.