{"id":4668,"date":"2024-08-05T08:00:00","date_gmt":"2024-08-05T13:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/cyber-risk\/how-regional-regulations-shape-global-cybersecurity-culture"},"modified":"2024-08-05T08:00:00","modified_gmt":"2024-08-05T13:00:00","slug":"how-regional-regulations-shape-global-cybersecurity-culture","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/08\/05\/how-regional-regulations-shape-global-cybersecurity-culture\/","title":{"rendered":"How Regional Regulations Shape Global Cybersecurity Culture"},"content":{"rendered":"<div class=\"media_block\"><a href=\"https:\/\/i0.wp.com\/eu-images.contentstack.com\/v3\/assets\/blt6d90778a997de1cd\/blt9fdbabec5e1b2c26\/64f17550f11104237e1bf6f3\/Earth-Globe-Iulia_Bycheva-Alamy.jpg?ssl=1\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture.jpg?w=640&#038;ssl=1\" class=\"media_thumbnail\"><\/a><\/div>\n<div><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture.jpg?w=640&#038;ssl=1\" class=\"ff-og-image-inserted\"><\/div>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><span class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_bold\">COMMENTARY<\/span><\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Cybersecurity regulations differ across regions, as does the level of security culture. As a result, cybercriminals are better able to take advantage of weak spots arising from the lack of a global governing cyber alliance. We remain scattered when it comes to overarching procedures and cybersecurity response. From North and South America to Asia, Africa, Europe, and Oceania, cybercrime is prospering within the regulatory gaps.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">To bridge these gaps, governments worldwide must collaborate closely to come to a consensus on how to deal with cybersecurity incidents. Unfortunately, this is not the kind of thing that will happen immediately. But by <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.knowbe4.com\/hubfs\/2024-Security-Culture-Report-Research_EN-US.pdf\" rel=\"noopener\">understanding the state of global security culture and regulation<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, we can point ourselves in the right direction.&nbsp;<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"The Americas\">The Americas<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While the emphasis of security culture in North America has resulted in changes to cybersecurity best practices, there are still plenty of major cyberattacks hitting the news. Ransomware events against MGM and United Healthcare show that even as the workforce improves its level of security awareness, there is a long way to go.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Security culture in South America is even more spotty. The varying levels of development <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.cfr.org\/blog\/raising-political-priority-cybersecurity-latin-america\" rel=\"noopener\">across South American countries means<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> cybersecurity companies will avoid investing too much effort in a less prolific region. Additionally, while there are some key regulatory requirements within South America, the lack of consistency across countries there puts the continent at a disadvantage. Though Colombia may be one of the more prepared countries with its strong outline of cyber strategies in its<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.dataguidance.com\/premium?type=opinion&amp;destination=opinion\/colombia-cybersecurity\" rel=\"noopener\"> National Council of Economic and Social Policy<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">, the region as a whole is not.<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"Africa &amp; Europe\">Africa &amp; Europe<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Africa, which has up to 2,000 unique languages and a quickly growing population, is rapidly adopting technology. African <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.tandfonline.com\/doi\/full\/10.1080\/1097198X.2019.1603527\" rel=\"noopener\">organizations have also experienced<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> the most growth in cybercrime over the past couple of years. With such a quickly evolving environment, security culture will take a while to catch up.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While various African countries boast cybersecurity legislation, the African Union&#8217;s Convention on Cybersecurity and Personal Data Protection has only been ratified by 15 of the 55 countries. This is concerning, since the <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.csir.co.za\/csir-hosts-hybrid-information-session-on-latest-cybercrime-trends\" rel=\"noopener\">South African Council for Scientific and Industrial Research<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> predicts an increase in cyberattacks against critical infrastructure and government organizations.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">In Europe, security awareness increasingly is gaining traction, but a range of attitudes toward cybersecurity culture remains.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While European cybersecurity regulations seem to be on track \u2014 for example, the well-established General Data Protection Regulation (GDPR) as well as the Digital Operational Resilience Act (DORA), which will be effective in 2025 \u2014 the truth is that many organizations haven&#8217;t taken substantive efforts to develop a security culture, leaving them vulnerable to cyberattacks.<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"Asia &amp; Oceania\">Asia &amp; Oceania<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Cybersecurity across Asia varies widely due to Asia&#8217;s diversity of culture and languages.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While legislation like the Association of Southeast Asian Nations (ASEAN) is a great step at unifying portions of the region, Asia is fragmented, and will likely remain so for some time. This is unfortunate timing, as the <\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.strategic-risk-global.com\/asia-pacific\/cyber-tops-risks-concerns-in-asia-pacific-top-tips-for-building-resilience\/1451028.article#:~:text=Cyber%20incidents%20such%20as%20cybercrime,the%20top%20concern%20last%20year.\" rel=\"noopener\">Allianz Commercial Risk Barometer for 2024<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"> predicts ransomware, malware, and social engineering to be the highest risks facing Asian organizations.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">While Oceania is taking some important steps in solidifying a strong cybersecurity culture, the region has a long way to go. However, due to recent data breaches in the region \u2014 Latitude Financial, Optus, and Medibank \u2014 cybersecurity is considered more of a shared responsibility.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Additionally, the Australian government has implemented various cybersecurity awareness campaigns teaching citizens how to remain abreast of cyber threats. Meanwhile, Australia and New Zealand have each released their own cyber-strategy policies, which encourage cyber resiliency and foster security culture.<\/span><\/p>\n<h2 class=\"ContentText ContentText_variant_h2 ContentText_align_left\" data-testid=\"content-text\" id=\"Global Cyber Cooperation\">Global Cyber Cooperation<\/h2>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">The ultimate solution, however idealistic, is for an overarching governing body to regulate and campaign for cybersecurity across the globe. In conjunction, each region should have its own consistent regulatory requirements.&nbsp;But that will take time.<\/span><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">In the meantime, individual organizations and individuals themselves can do various things to protect themselves in the face of increased cyber threat. It all begins with a strong security culture. While it may be more difficult for some organizations, the basis for a robust security culture is for everyone involved to feel responsible for their workplace, their city, their country, and so on.<\/span><\/p>\n<p><a href=\"https:\/\/www.darkreading.com\/cyber-risk\/how-regional-regulations-shape-global-cybersecurity-culture\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>COMMENTARY Cybersecurity regulations differ across regions, as does the level<\/p>\n","protected":false},"author":12,"featured_media":4669,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-4668","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=2560%2C1440&ssl=1",2560,1440,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=640%2C360&ssl=1",640,360,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=1536%2C864&ssl=1",1536,864,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=2048%2C1152&ssl=1",2048,1152,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=1024%2C576&ssl=1",1024,576,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/uncategorized\/\" rel=\"category tag\">Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/how-regional-regulations-shape-global-cybersecurity-culture-scaled.jpg?fit=2560%2C1440&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/4668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=4668"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/4668\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/4669"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=4668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=4668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=4668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}