The Evolution of Social Engineering: What you need to know to stay safe online.

Social engineering is a method of cyber-attack that uses psychological manipulation to trick individuals into revealing sensitive information, downloading malware, or submitting payments to fraudsters. Typically, cybercriminals pose as trustworthy entities, such as banks, government agencies or tech companies, to gain victims’ trust and persuade them to share confidential data. According to a report by Verizon 's Data Breach Investigations Report 85% of all data breach involves human interaction.

The use of social engineering techniques has become a rapidly growing threat to cybersecurity. Hackers are finding new and innovative ways to conduct these tactics and exploit human error. The rise of social media and the use of personal data online has created a highly advantageous environment for cybercriminals. With these platforms, hackers can now utilize a range of psychological tactics, such as Fear of Missing Out (FOMO) or the Authority Principle, to manipulate individuals into complying with their requests.

One of the most common social engineering techniques is phishing and in 2023, it is predicted that over 75% will starts from phishing emails, the evolution of social engineering is creating a higher level of risk for businesses and individuals. The latest standard in this technique targets emails that contain malware which replicates the sender's email. This makes it difficult for victims to recognize a phishing email, as they think it’s coming from a trusted email or contact.

Organizations can protect themselves from phishing scams by providing their employees with regular cybersecurity training. This training should cover best practices for identifying and responding to phishing emails as well as implement technical solutions such as spam filters and anti-malware software to prevent phishing emails from reaching their employees' inboxes. Additionally, implementing network security protocols such as firewalls, intrusion detection systems, and encryption can help protect sensitive data from being stolen or compromised. In addition, equipping employees with the know how of managing a cyber incident during a data breach with the right process.

In summary, preventing phishing scams requires a combination of employee education, technical solutions, and proactive security measures. By equipping employees with the knowledge and tools to protect themselves, organizations can significantly reduce the risk of falling victim to these types of attacks.

Embracing Flexibility: The Key to Thriving in the Modern Workplace"

The COVID-19 pandemic has brought about a significant change in the way businesses operate, and the world of Human Resources is no exception. One of the most significant HR trends that emerged during the pandemic is the need for flexibility and it is here to stay.

The traditional 9-to-5 workday in an office is no longer the norm. Remote work and hybrid work models have become increasingly popular, and many companies are now offering more flexible work arrangements to their employees. This shift towards flexibility has been driven by the need to balance work and personal life, reduce commuting time, and increase productivity.

Employers are also becoming more flexible in their approach to recruitment, hiring, and retention. Companies are now considering candidates from different locations, offering more part-time and contract positions, and embracing diversity and inclusion in their workforce.

In fact, according to a study by Mercer’s Global Talent Trends (GTT) Study 2023, more than 1,020 HR leaders in Asia who were involved in the survey, 53% indicate improving workforce planning in 2023 and offering work flexibility as one of the needs that employers in Asia to consider offering.

To support this new normal, HR professionals need to adapt their practices and policies. They need to create a culture of trust and accountability, provide the necessary tools and resources for remote work, and ensure that employees have the right skills and training to succeed in a flexible work environment.

As a matter of fact, organisation embracing flexible workforce are able:

Increased access to talent

With a distributed workforce, companies can access top talent from across the globe. This helps organizations to diversify their skillsets and bring in employees with different perspectives, resulting in more innovative and effective work output.

Cost savings

Distributed teams can save costs associated with maintaining a physical office space, including rent, utilities, and maintenance. This can be particularly useful for start-ups and small businesses that need to manage budgets judiciously without compromising on efficiency.

Flexibility and work-life balance

Remote work offers flexibility to employees, which can lead to a better work-life balance. This can result in increased job satisfaction and higher employee retention rates.

Effective communication

To ensure seamless collaboration and smooth project execution, organizations must establish clear communication channels and protocols. Managers should encourage regular check-ins and updates, while employees should be comfortable discussing issues and clarifying doubts. Enterprise communication tools like Slack, Microsoft Teams, and Zoom can facilitate this process.

Set clear expectations

Managers should articulate clear expectations with their team members, describing the specific tasks, deadlines and KPIs. This helps to establish accountability and keep employees motivated.

As businesses continue to embrace remote work, understanding the benefits and challenges of a distributed workforce will help organizations adapt and thrive in the ever-evolving marketplace. With the right strategies in place, companies can unleash the true potential of a distributed workforce and achieve greater organizational success.

Excessive Repair Cycles – Innovative Solutions

The following piece is not out of a Management Textbook, but rather the result of the cumulative years of experience of a few consultants working with companies trying to improve their work practices

There is a saying – using the same solution for the same problem is a sign of idiocy. We see this all the time, especially in government applications, such as printing more money trying to get out of the hole but creating a bigger problem. We often see this in business where managers use the same solution for different kinds of problems. When you are allocating time and human resources to solve a problem, why not use the same time and meeting to aspire towards a more innovative solution.

It is easy, because it is only a matter of asking a different question, such as “Why do you want to make this decision?” For example, you are considering buying a new car and when I ask you.

“Why do you want to do that?” it might sound like a senseless question, but your answer is

“I need to have transport getting to work on a daily basis.”

So, why are you not rather considering deciding on “Find the best way to get to work”. Your answer might still be to buy a new car, but you might just find a more innovative solution for the same time and effort.

Imagine the time, money and other resources wasted having multiple meetings, re-forming your decision, not having any buy-in from staff and having to make yet another decision on the same issue before long. As consultants we are conscious of the following behaviors that could cost a lot of time and effort in an economic environment where we really cannot afford it.

• Finding a solution for the effects instead of its underlying cause/reason. It is much cheaper, quicker, and more acceptable for all to find a solution for the underlying cause of the effects.

• Collaborate with the correct stakeholders from the outset. It is much cheaper having their buy-in from the outset in the decision-making process.

• Engage the most appropriate information resources. Don’t settle for “stand-ins” and ensure you get your facts from the best qualified people

Follow an innovative decision-making process so that participation is orderly and logical for all. Normally we use functional analysis whereby we break down the decision component(s) into its most basic function (going back to the original concept) and then looking at ways of doing it differently.

Client Success Story

A fossil fuel power station was getting to the end of its lifecycle, and they wanted to extend the life of the facility by at least another 10 years (LifeX). The Engineering Team had already outdone themselves by finding a way to strip all the interior piping, electricals, and other maintenance items and re-purpose and rebuild using the existing concrete structures.

About three weeks into LifeX they hit a bottleneck, as there was only one elevator going up 10 stories. It was going too slow, and they needed to speed up the daily volume.

The basic requirement was they needed more volume capacity. They looked at many options but could not find an acceptable one. We asked a few questions and they decided they need to find a way to bring more materials up and down without affecting the other LifeX operations. After some discussion they decided to create another door opening through the one-meter concrete wall and install a high-capacity temporary elevator on the outside of the concrete structure. This action was cost effective and quick and saved them at least three weeks’ work.