Why You Need to Prepare for a Cyber Security Breach

01/29/2019 | By Sarah Kloepple

When Super Bowl Sunday approached, a cyber security breach during the event was among many of the concerns on security experts’ minds. Millions were expected to tune in when the Super Bowl kicks off in Atlanta, setting a big stage for someone who wanted to wreak havoc.

Panelists at the inaugural Symposium on Cyber Culture, held in January 2019 in Atlanta, addressed these issues by discussing the stakes and how battling a breach needs to be a team effort.

Mercedes Benz Stadium in Atlanta, Georgia - home of Super Bowl LIII
(Photo: Mercedes Benz Stadium in Atlanta, Georgia - home of Super Bowl LIII)

“Everyone has the same risks [of experiencing a cyber security breach]; it’s just the size of the beast. The Super Bowl is a big beast. The unique thing is the number of eyeballs watching,” says Mike Daugherty, founder of the Cyber Education Foundation, which put on the Symposium on Cyber Culture. “[This event] was a good way to bring people together and ask, ‘You’re running the Super Bowl. What do you do?’”

The symposium’s panel included representatives from backgrounds including human resources, legal and consulting. “I was seeing all these [breach] events that just had one type of person in the room,” Daugherty says. “When you have a breach, it’s all hands on deck. I wanted to bring people in with different backgrounds who think differently.”

[Related: 3 Tips to Improve Facility Cybersecurity]

A Cyber Security Legal Battle

The creation of the Cyber Education Foundation was inspired by Daugherty’s firsthand experience. In 2008, his company, LabMD, was hacked by a security consulting firm that wanted him to buy their services. The firm accessed a confidential file on one of LabMD’s workstations that had LimeWire’s file-sharing software downloaded onto it.

Daugherty refused the security consulting firm, which then turned the file over to the Federal Trade Commission (FTC). The FTC has a history of suing companies that experience security breaches (hoping to improve general security practices) and eventually brought those charges against LabMD – forcing it out of business.

BUILDINGS Podcast

Security Threats of Tailgating and Piggybacking

BUILDINGS Podcast - Security Risks of Tailgating and Piggybacking

Sean Ahrens, a leader in the field of security and resilience, shares insights with Janelle Penny into the security threats of tailgating and piggybacking in respect to the access control of your building. Listen now >>

Daugherty decided to fight the system, and he entered into a decade-long battle with the federal government. In the summer of 2018, the 11th Circuit Court of Appeals sided with Daugherty, saying that “the FTC’s approach to developing security standards violates basic principles of due process,” according to The Hill.

His win is considered one of the most significant legal victories in cyber security history. With the Cyber Education Foundation, Daugherty aims to bring awareness to stories like his and help medium and small businesses prepare for similar attacks. The foundation plans to bring the Symposium on Cyber Culture event to at least 20 other US cities throughout 2019.

Help BUILDINGS Shape 2019!

BUILDINGS Shape 2019 Survey

What BUILDINGS resources are most valuable to you? What would you like to see us provide?

Please take our short (under 2 minutes) survey - just 5 short questions.

Thank you!

“I hope people left [the Atlanta event] thinking, ‘We have a lot of preparation to do,’” Daugherty says, adding: “Most probably don’t involve the marketing or PR department in breach practice. The main goal is to bring people together and think, ‘We have to have a team.’”

Cyber Security & Facilities Management

When LabMD experienced its cyber security breach, it was located in a Class A office building. Daugherty’s first rule of thumb for facilities managers is to evaluate all of the tenants in your building and how they interact with cyber networks.

[Check out: 5 Must-Know Security Trends]

“The weakest link is the human being,” Daugherty says. “You can tech your building up like crazy, but who’s letting people in the door at 3 a.m.? Who’s watching the locks? As people get phobic and afraid of cyber, the big organizations tend to recede, become silent and look for who to blame.”

To that end, Daugherty recommends you should avoid pointing fingers. Instead, set a good example by praising good habits and give tenants constant reminders on best cyber security practices. Top-level executives should also be encouraged to get involved. “The C suite has got to get out and break bread,” Daugherty says.

[Related: BUILDINGS’ Year in Review: 2018 Security Trends]

Be proactive. Set up practice breaches and involve a wide array of departments – from facilities to IT to PR to legal.

Daugherty adds, “We need a whole lot more education, collaboration and a whole lot less punishment.”


Two handpicked articles to read next:

Download Podcast

Connectrac® wireways are the new standard for bringing power & communications cable management to all interior applications. Free yourself from core drilling!

Surpass State Energy Requirements with Dual-Cooling Data Center CRAC Technology

See how professionals like you are taking advantage of the highest performing precision cooling system for their computer rooms and data centers, and why Data Aire is fast-becoming the number one choice for facility managers and building owners looking to decrease their energy consumption. 

Data Aire understands how digital technology and data gravity is rapidly impacting and transforming businesses. That’s why they developed ultra-efficient cooling technology to support the most modern (and not-so-modern) data centers.  Learn how One Wilshire in Los Angeles, one of the most advanced carrier hotels today, is surpassing California's strict energy efficiency requirements with Data Aire’s purpose-built system, which provide full-economization for 260 days – almost 72% of the year. That’s a measurable savings! Furthermore, the projected PUE on an annual basis for a full load is at or below 1.2.

Connectrac® wireways are the new standard for bringing power & communications cable management to all interior applications. Free yourself from core drilling!

Surpass State Energy Requirements with Dual-Cooling Data Center CRAC Technology

See how professionals like you are taking advantage of the highest performing precision cooling system for their computer rooms and data centers, and why Data Aire is fast-becoming the number one choice for facility managers and building owners looking to decrease their energy consumption. 

Data Aire understands how digital technology and data gravity is rapidly impacting and transforming businesses. That’s why they developed ultra-efficient cooling technology to support the most modern (and not-so-modern) data centers.  Learn how One Wilshire in Los Angeles, one of the most advanced carrier hotels today, is surpassing California's strict energy efficiency requirements with Data Aire’s purpose-built system, which provide full-economization for 260 days – almost 72% of the year. That’s a measurable savings! Furthermore, the projected PUE on an annual basis for a full load is at or below 1.2.


Related Coverage