In this post, we discuss why you should be conducting employee risk and security surveys and why Slack is a great tool to do it. We conclude with an example survey template that can be used to kickstart surveys at your company.

Your policies and procedures are the backbone of your information security, privacy, and compliance program. Everything else - configurations, tools, etc - should be built on top of your policies. Policy acknowledge is a requirement for most security audits.

Based on customer feedback and an evolving security landscape, we’re excited to release the newest version of our security awareness course — Modern Security Awareness Training! We've taken the most important security topics, applied them to modern work, and presented them in engaging ways.

Cybersecurity is dynamic. There are new threats, vulnerabilities, and scams every week. It’s hard for security professionals to keep up with everything. It’s impossible for employees at your company to keep up. Security announcements is a good and easy first step towards security engagement.

Context and frequency drives connection.Connection drives engagement.Engagement drives effectiveness.At Haekka, we continually deliver hyper-contextual training to users. We connect security to employees. This connection is what drives security engagement and effectiveness.

In an ideal world, one where employees learn and adopt security hygiene best practices, staying ahead of attackers, security awareness training should be continuous. The ideal state of this training is that it is seamlessly integrated into the work people are doing. It’s just a part of the workflow.

This is a blog post comparing Haekka and KnowBe4's security awareness training platform. The post includes a list of features that are essential to creating an effective security program. It goes over price, content, integrations, and much more.

As organizations continue to focus more on cybersecurity, there needs to be a particular emphasis on Security Awareness Training. Given that many leaders focus on ROI, this article shows how SAT has over 500% ROI in many situations. Haekka's ROI is essentially infinite since our training is free!

A blog post showing 5 tasks that companies can automate or integrate with Slack. Centralizing operations in Slack is a great way to increase efficiency by maintaining productivity. Switching between apps wastes time, and the 5 Slack integrations listed allow people to carry out daily tasks in Slack.

Security awareness training is essential for every business's survival, but there are many competing vendors with tons of offerings to choose from. This is a blog post/guide giving prospective buyers 5 things to evaluate when choosing which security awareness platform to purchase for their company.

This blog post explains how leaders can create a culture of security in their company. Cybersecurity is more important than ever, and ensuring that everyone buys into protecting the company is paramount for protecting private data. This post has 4 steps people can take to build that culture.

Slack is the platform for work communications. This communications takes different forms from employee to employee, public vs private, app to person, on and on. The workflow options for Slack are almost endless. How you organize you Slack workspace should match how you organize work.

An article discussing the latest cybersecurity breaches affecting major tech companies. These hacks were carried out by the Lapsus$ organization and used social engineering techniques to bypass multifactor authentication.

A blog post explaining the various types of Slack Roles and the permissions associated with them. It is meant to help companies setting up their Slack workspaces maintain compliance. It should be read in conjunction with our other Slack articles.

Data is both a differentiating asset for companies and an existential liability. Slack, as the operating system for modern work, contains data not just from Slack but from all the various apps and services that connect to Slack. This amounts to a ton of data, some of which is sensitive.

The specific permission scopes for Slack App Directory apps are API calls. These API calls are behind the user friendly presentation that users see when they approve an app for install into their Slack Workspace. App owners should be able to explain the Slack permission scopes their app needs.

The Securities and Exchange Commission has proposed new legislation that would make cybersecurity incidents part of its mandatory reporting rules. Currently, companies must report relevant events that could impact their stock prices, and now cybersecurity might be a part of those reports.

Slack is a workflow platform. To extend the value of the platform, Slack added the equivalent of an App Store. There is no right and wrong set of permissions for Slack apps. The most important thing is to ensure app permissions are reviewed before Slack App Directory apps are installed.

When it comes to using Slack in a HIPAA compliant way, Slack App Directory apps can potentially access PHI depending on their permissions. Because of this, it’s imperative that you put policies in place to comply with HIPAA when you use Slack and Slack App Directory apps.

This is a blog post talking about how more hackers are attempting to breach organizations via Microsoft Teams. Malicious parties are using social engineering techniques to gain access to people's Microsoft account credentials. It also includes tips for securing your organization's Teams Workspace.

Where does work get done today? Whether remote, hybrid, or in person, work is done primarily in the SaaS apps. As we navigate these flows of work in SaaS apps, security and privacy is often not top of mind. How can we change that? How can we add a human security layer on top of our SaaS apps?

We built training into Slack as a means of delivering content within the flow of work. The next iteration of Haekka training will be event-driven (EVDT). While Haekka and EVDT can be used as the sole security awareness training vendor, it can also succeed as a companion to existing vendors.

This covers 5 cybersecurity practices all remote workers should follow. Remote work enables employees and companies to operate more efficiently, but also introduces new data security risks. The new way of working has made security everyone's concern, so all employees should always remain vigilant.

A blog post explaining what companies that use Slack to store, discuss, or transmit protected health information should and should not do. It includes tips for securing Slack and explains what practices Slack has prohibited.

This is a blog post detailing the top 5 challenges companies trying to maintain HIPAA compliance face in 2022. The world has changed a lot in the past two years and there are many new areas where organizations need to protect their data as compared to the past.