HEADSPACE HEALTH
“ The company has always had an extremely strategic focus on cybersecurity from the very beginning . We have built a very mature programme , and now we are morphing it from just purely cybersecurity to a very privacy-focused programme as well .”
As Thapliyal explains , part of Headspace Health ’ s success from a cybersecurity standpoint is the creation of a culture where everyone is aware of the importance of security and privacy .
“ Unlike many other companies and industries , mental healthcare is one of those domains where privacy is super important for everybody , including our patients , user members , and our clinicians and coaches . Everybody in the company is highly aware and sensitive about preserving privacy ,” he describes .
“ The whole cybersecurity industry is still learning how to build that culture of security , which permeates through the whole organisation and is not just limited to the InfoSec teams or the IT teams or engineering teams . It ' s a challenge , and it requires a thoughtful approach . When we onboard a brand new employee , for example , we focus on cybersecurity from day one . That ' s where the journey starts for a new employee , and then it has to continue throughout their time at the company .”
But , as Thapliyal explains , relying on training alone isn ’ t enough . Highly compliance-driven training can quickly become repetitive , so keeping everyone engaged is critical .
“ We have a strategic plan in the InfoSec team to drive engagement within 56 March 2023