b'CYBERSECURITYHowever, the greatest opportunity may2: MITIGATING SECURITY RISKSentrepreneurs and businesses, there are lie in going one step further. Threat andIN PARTNERSHIPS special considerations for Indigenous-risk assessments are even more bene- Forming new and innovative businessowned businesses. The 2022 study, ficial because you can include businesspartnerships is a great way for entre- Another Digital Divide: Cybersecurity objectives. Instead of only looking at itpreneurs to grow their businesses andin Indigenous Communities, points to with a cyber lens, you can look at it with again new audiences. As new partnershipdisproportionate cybersecurity impacts business risk lens, explains Martin-Ross.opportunities emerge, so do third-partyon Indigenous communities and busi-Its more holistic, and it can lead to othercybersecurity risks. We often hear innesses, including lack of cybersecurity assessments that are more tailored tothe news that an organizations data hasawareness, education and prevention your situation. been compromised. Sometimes they areskills, and lack of broadband or cellular partnered with another organization, andservices in Canadas northern, rural LATER-STAGE ENTREPRENEURS that organization then becomes compro- and remote regions. The study notes For entrepreneurs a few years intomised, explains Martin-Ross.increased cybersecurity risks and the their business who havent done thepotential for victimization in Indigenous previous four steps, dont panic. It isOne companys data breach could startcommunities, and the authors stress the never too late to loop back and securea chain reaction, impacting one or moreneed for an improved understanding of sign-on methods, passwords and websitebusinesses. Worse still, the private clienthow to foster culturally appropriate forms data. That said, later-stage entrepre- data held by each organization may alsoof cyber-resiliency.neurs may encounter different cyberse- be at risk. Not only could this break curity risks during the business growthtrust with clients. If partners lose trustThis last point is where Martin-Ross sees stage. Martin-Ross points to four thingsin each others ability to secure data,an opportunity for Indigenous-owned to consider. your budding new partnership couldbusinesses. Many general cybersecu-be in serious trouble. Although there isrity frameworks exist. However, theres 1: CYBERSECURITY ROADMAP no one-size-fits-all solution, Martin-Rossnone with an Indigenous lens. Theres a Taking the concept of holistic cybersecu- notes the opportunity of working withgreat opportunity for Indigenous entre-rity even further is the concept of a cyber- a cybersecurity consultant to mitigatepreneurs to create their own cybersecu-security roadmap. Its quite beneficial topartnership-related data risks throughrity framework that may not be present build a cybersecurity roadmap that alignsassessments and different tools. Thereinnon-Indigenousorganizations, with and supports your business objec- are a lot of factors, he says. Its impor- he explains. tives, says Martin-Ross. Cybersecuritytant for those risks to be identified, moni-is a business enabler, an insurance thattored and then appropriately managed. Although existing cybersecurity frame-your business is protected and that yourworks can be leveraged, Martin-Ross clientele maintains trust. Leveraging3: TALENT MANAGEMENTnotes that the true value in this approach a roadmap and having milestones isAs the business grows, it is importantlies in incorporating their Nations views very useful. to have talent management to ensureinto how they manage business risk.that the right people are in the right Road mapping for cybersecurity is reallyspot at the right time, says Martin-Ross.What could such a framework look like? about determining where the businessWhile it is common for entrepreneurs toAlthough Martin-Ross is not aware of any wants to go and supporting that pathgrow their teams to support specialized forward. The process looks at under- tasks such as accounting or social mediaexisting Indigenous cybersecurity frame-standing their business. What drivesmanagement, cybersecurity support isworks, he has some thoughts on how them? What kind of challenges do theyoften forgotten. cultural views could be integrated: For face? We look at the positives of theirIndigenous businesses it may be more business to leverage what theyre doingYet, effectively addressing cybersecuritymeaningful to incorporate elements well. We also weave in observationschallenges requires a high level of tech- such as language around threats and and recommendations to help themnical expertise (and time to keep up withmanaging vulnerabilities. It could also leverage their momentum in other ways,ever-changing cybersecurity threats) thatbe views or cultural practices within their notes Martin-Ross.few entrepreneurs possess. Its impor- security framework and culture.tant to have a trusted advisor with cyber-By helping his clients create and navi- security expertise so that you can focusGiven the diversity of First Nations, Inuit gate cybersecurity roadmaps, Martin- on your business instead of mainte- and Mtis cultural practices, there is no Ross helps entrepreneurs do somethingnance tasks, says Martin-Ross. Then,one-size-fits-all framework that will work that they rarely have time for: take ayou can devote that time to buildingfor everyone. Nor should there be. As step back to reframe how they see theirnew connections, partnerships, andcommunities develop their cybersecu-business. Clients find the process veryidentifying opportunities to expand,rity posture, there will be more voices beneficial. They get to receive feedbackgrow and better serve your customeremerging to create ways to manage risks and advice from an outside party who isbase. Its about finding ways to letfor Indigenous businesses, predicts trying to understand them, what theyreentrepreneurs shine. Martin-Ross. There will be different going through and create a new narra- lenses on how to do that. It may vary tive, he says. Its a rewarding process4: TOWARDS AN INDIGENOUSNation by Nation. But it will certainly for everyone involved. As consultants, weCYBERSECURITY STRATEGYdepend on the business, and how they also get to learn more about our clients. While cybersecurity risks impact allwant to manage their risk.82A CCAB PUBLICATION2023'