CHCC IT chief: Cybersecurity is everyone's responsibility - Marianas Press
Dr. Belen Busby, Commonwealth Healthcare Corp. CIO, emphasized that cybersecurity is a shared responsibility requiring all employees to verify suspicious requests and prioritize security over convenience.
Dr. Belen Busby, Commonwealth Healthcare Corp. chief information officer, delivered a clear message during a recent presentation: cybersecurity is not solely the domain of IT professionals but a shared responsibility across organizations. Speaking before members of the Society for Human Resource Management-Northern Marianas Chapter at Aqua Resort Club in Achugao on Nov. 12, Busby offered three critical recommendations as artificial intelligence increasingly integrates into workplace operations.
Busby's first advice centered on verification in an era where AI has enabled cybercriminals to create convincing impersonations. Unlike traditional phishing emails with obvious errors, AI-generated messages can appear professionally written and come from seemingly legitimate sources. She urged employees to independently verify unusual requests, particularly those involving financial transactions or sensitive information, even when supposedly coming from supervisors.
Do not do the report or the request unless you verify that it's legitimate.
Security over convenience
Her second recommendation emphasized that convenience should never compromise security. While AI can boost productivity by helping prepare documents and summarize reports, Busby warned against uploading confidential information to unapproved platforms. She stressed that organizations must establish clear AI policies, approve appropriate tools, and ensure human review of AI-generated documents.
Cultural shift
Busby's third recommendation called for a cultural shift where cybersecurity becomes everyone's responsibility rather than just an IT concern. She challenged the perception that employees are the weakest link, instead positioning them as the first line of defense. When security incidents occur, organizations should examine whether adequate training, safeguards, and reporting procedures were in place rather than automatically blaming workers.
Busby recommended regular employee training, multifactor authentication, clear reporting channels, and an environment where workers feel comfortable reporting mistakes without fear of punishment. She also expressed support for the CNMI government adopting its own AI and cybersecurity policies, suggesting it should start with government leadership.
We are not just protecting computers and information. We are protecting our employees, our customers, our organization, and the people that depend on us.
Acknowledging that IT departments lack resources to monitor all employee activities, Busby emphasized the importance of organizational policies and employee awareness. She encouraged small businesses to utilize free cybersecurity resources from CISA and stressed that AI should be used responsibly with employees remaining accountable for their work.
Related
