Back to all insights

Practice Better ‘Cyber Hygiene’ to Reduce Attacks – Tech Expert

Practising basic “cyber hygiene” could prevent the overwhelming majority of cyber breaches. That’s the message from Kevin Cushnie, Director of Engineering at MC Systems, who urged business leaders to take a more proactive approach to cybersecurity during the recent Azure Insights CIO Round Table held in Kingston.

Speaking to a room of senior executives and IT leaders, Mr. Cushnie defined cyber hygiene as “the routine practices and behaviours that keep your digital systems and data secure.” Much like personal hygiene protects physical health, he said, cyber hygiene protects a company’s financial health and reputation. And in today’s threat landscape, neglecting it isn’t an option.

“The cybersecurity landscape is constantly evolving,” he told the audience. “But here’s the truth: 95% of breaches reported could have been avoided with basic preventive measures.”

Jamaica’s Unique Position in the Region

Cushnie emphasised that while cyberattacks are a global concern, Jamaica faces an outsized risk.

“We’re the most targeted country in Latin America and the Caribbean when it comes to cyber threats,” he said. “We rank ahead of much larger markets like Mexico, Colombia, and Paraguay but with fewer resources to respond effectively.”

The good news? Jamaica saw a 78% drop in attempted cyberattacks in 2024, according to the Jamaica Cyber Incident Response Team (JaCIRT).

“That reduction is not by chance,” Cushnie explained. “It’s due to more awareness and deliberate steps taken by organisations to close security gaps before they’re exploited.”

Microsoft Secure Score as a Benchmark

One of the tools Mr. Cushnie recommends for improving security posture is Microsoft Secure Score. This is a feature within Microsoft 365 that evaluates a company’s cybersecurity strength and offers tailored recommendations.

“Secure Score gives you a tangible benchmark,” he said. “Most organisations fall between 41% and 70%. But hitting 65% or higher is significant. It’s where you start to see a meaningful drop in incidents.”

Cushnie noted that companies at or above this score aren’t just better protected, they also tend to gain more trust from customers and can even benefit financially. “Cyber insurers are beginning to offer better rates to companies that can demonstrate a stronger security posture,” he added.

The Bottom Line: Get Ahead of the Risk

Cushnie urged companies, especially those using Microsoft 365 and Azure, to take advantage of built-in tools that identify and correct weak points across their networks.

“Security isn’t just about technology. It’s about mindset,” he said. “Leaders need to treat cybersecurity the same way they treat finance or compliance with ongoing attention and investment.”

He closed with a simple warning to CIOs and business leaders: “Cyber threats are real. It’s not a matter of if, but when.” Don’t wait to become the next headline that tells the world that your company has been exposed in a major data breach. Start now and improve your cyber hygiene.