'Companies must build a 'human firewall' to combat internet-related security issues, as cybersecurity is also a people, and not just a technology, issue,' said Mhycke Gallego, advisory practice leader of P&A Grant Thornton, one of the country's leading audit and professional services firms. 'People are our first line of defense. It is best to upskill their competence and capabilities on cybersecurity and help them reduce the risk of security breaches,' he said.

In an increasingly digital world, making employees vigilant against real-life cybersecurity attacks demands more than just complying with information, technology and cyber security training requirements. To strengthen the human firewall, the organization should undergo a change management process 'so people will be able to manage the shift brought about by digitalization, as well as understand its impact to the overall IT governance process,' said Gallego, a certified risk and information systems control (Crisc) and risk management assurance (CRMA) professional.