cybersecurity risk assessment activities --- I don't think that some activities shall be prioritized, such as "cybersecurity risk assessment activities", however, I think both regular, "core mandate" activities and "extras" activities should be balanced on the agenda. There should be a specific time, for example, at the beginning of the working day. Whenever an employee starts his/her PC, the first thing that matters should be a reminder or an instruction on a loading screen: to be aware of possible malware, not to use a random flash driver, not to visit suspicious websites, etc. The next step is to give a comment during lunch break. Just a simple reminder of the same things mentioned above. And at the end of the day, to check files for possible viruses and to clean extra, useless files.

Source author: Valerii Paziuk paziukvalerii@gmail.com