Mr. Daley shared a fresh and strategically aligned outlook on cybersecurity, focusing on “The Interface of Cybersecurity and Human Behavior in the Workplace.” With over a decade of experience, Mr. Daley is considered a specialist in cybersecurity solutions and network security and IT systems. He spoke about Continuous Compromise Assessment (CCA), a proactive cyber defense model. It is an approach that acknowledges that even when threats are not detected, cyber breaches are bound to happen, shifting the focus from prevention to continuous monitoring and quick response. Hence, dealing with these threats is no longer a question of “if” it will happen, but “when” and how best to manage such a situation. The connection to HR was made clear when he further explained how companies employing the CCA model can prevent the risk of exposing company data and private employee records, which fall under HR’s responsibilities.

Another key moment of Daley’s presentation was when he showed how social engineering – using people, not computers – is often used to breach company security. As future HR leaders, this is a truly relevant point to note, as employees can be very susceptible to cyberattacks and therefore become one of the biggest security risks to the organization. He also spoke about the LATTE model – Listen, Acknowledge, Take Action, Thank, and Explain – a communication method that can be used to manage internal communications, especially during a cyberattack. He further stressed that having trust and effective communication are vital for resilience. He concluded by encouraging the seminar body to not only create or be familiar with cybersecurity policies but also be advocates who promote these policies throughout the company. Two things I knew before listening to Daley’s presentation were:

• One of the major contributors to cybersecurity is human error
• To be effective, cybersecurity protocols must be updated regularly

On the other hand, two of the main lessons I have learnt were that:

• As HR professionals, we should lead by example and actively bring awareness and promote vigilance in the workplace to mitigate cyber threats.
• The CCA assumes that threats are always present, and it focuses on real-time detections.

Lieutenant Colonel Godphey Sterling (Ret’d), a man of great discipline and expertise, was our guest speaker for the day. Delivering a powerful presentation titled “The Importance of Cybersecurity and Data Protection in Human Resource Management,” he underscored that HR is no longer just about managing people – HR professionals are now at the core of securing employees’ sensitive data as the world continues to become digitalized. He noted that an employee’s file contains data that can facilitate unscrupulous acts such as financial fraud, identity theft, etc. To support this point, he cited global statistics which stated that in 2023, the average cost of cybersecurity incidents was a staggering USD 4.45 million and rising. With a clear picture of what is at stake, Mr. Sterling urged us, as the future HR leaders, to be proactive custodians of digital trust within our respective organizations. He went on to highlight the fact that the risk of cyber threats is not solely attributed to cybercriminals outside of the company, but also to internal carelessness. Using weak passwords, leaving confidential documents lying around, and ignoring security warnings were some of the examples he listed as internal carelessness. While these might seem like simple lapses, they can put the company in a vulnerable position. As such, the HR department is now critical in the defense against cyber-attacks. Additionally, he pointed out the fact that HR personnel can be held accountable - ethically and legally - for how they collect, store, and even destroy data as outlined in Jamaica’s Data Protection Act.

Continuing his presentation, he introduced an emerging concept in cybersecurity known as Cyber-HRM. He described it as a combination of cybersecurity and HR management and encouraged us to embrace this shift, fostering a culture of cybersecurity in every future workplace by working closely with the IT department, attending regular training sessions, using new technologies wisely and staying up to date. To conclude, he reiterated that human beings are the weakest link in the defense against cyber-attack, however, he believes that with adequate awareness initiatives and education, HR can change that narrative and become the first line of defense against cyber threats. Two things highlighted in Mr. Sterling’s presentation that I had prior knowledge of are:

• The human resource department is in charge of employees’ sensitive data
• Data breaches can cause companies to suffer major financial losses.

However, I have also learned that:

• With the passage of the Jamaican Data Protection Act 2020, HR professionals can be held legally accountable for how they collect, store, and even destroy data.
• The concept of Cyber-HRM seeks to position HR professionals as key players in shaping a culture of security in organizations, as well as protectors of sensitive data.

Both speakers' messages were transformational and informative. Each presentation provoked a sense of responsibility as a future HR professional operating in this digital age.