Shellsoft Technology Corporation, one of the top providers of cybersecurity solutions to Philippine enterprises, is advising Filipino businesses to not take cybersecurity risks for granted.  

Having sat down with the company’s top brass, Jon Clairmond Siy, Shellsoft chief security advisor; JB Munoz, chief operating officer; and Edwin Boon, chief executive officer and president of Shellsoft, each of them shared insights in how the country should adopt a cybersecurity culture. 

A cybersecurity culture, essentially, is at the very least having minimal awareness about the dangers online. Clicking on a suspicious link, for instance, will be opening doors to malware. Especially these days when smartphones are treasure troves of personal information. I know some people who may shrug these things, saying, “Wala naman sila makukuha saakin.” By this, they mean, the hackers will gain nothing even if they manage to hack them. 

This is, of course, inaccurate. A hijacked Messenger account means the hacker has contact with your friends and family. A hijacked account is like leaving your front door open, it makes those close to you vulnerable. You yourself may not lose much, but you’ve become an avenue for hackers. 

That’s something to consider.  

“Therefore, it is important to make it as difficult as possible for bad actors to succeed, rather than trying to clean up after they have achieved entry,” Boon said. 

There have been some high-profile breaches in the past, here in the country and abroad. The use of ransomware has also spiked. According to Siy the use of ransomware in 2023 has surpassed the combined numbers of 2021 and 2022, and these will only continue to rise.  

“While those statistics may sound bleak, minimal awareness of cybersecurity can go a long way in preventing critical exposure,” he said. “That’s why it’s important to practice and promote a good cybersecurity culture, especially in the workplace.” 

“As cybersecurity threats continue to evolve, we should be able to keep up with the proverbial arms race. It’s our job as cybersecurity service providers and consultants, it’s what we’re hired to do. And you should invest in cybersecurity if you don’t want any mission-critical data compromised,” JB Munoz added. “But for more common threats, having that foundational knowledge and culture of cybersecurity can spell the difference between a minor hiccup and a massive breach.”