Categories: Recruiting Software Blog
For recruiters and HR managers, online resumes could pose a cyber security risk.
Job boards are a common way of posting a job opportunity. Hopeful applicants respond by uploading a resume, and oftentimes, a cover letter. In 2015, several companies were digitally attacked through malware carried by decoy resume documents. A couple of examples include:
Whether it is a resume from a job board, or from Craigslist, hiring personnel are vulnerable to any of these hacks.
In an increasingly competitive job market, companies with an urgent need to fill a skilled position could be tempted to cut corners during the hiring process. Explains Cisco security expert Nick Biasini, "These attacks are successful because these types of emails are seen legitimately as well. If they happen to reach someone who is in the process of hiring or evaluating candidates they are likely to open the attachments and follow the process."
Employ good digital hygiene
Social engineering techniques can trip up any company. Personnel who would not click on a questionable website online, may readily open an infected attachment. Even with secure recruiting software, your most vulnerable point is at access--through the people who interface with material from potential applicants, job boards, and others.
In the coming year, an increasing number of companies will suffer cyber invasion. HR is well positioned to contribute to digital security initiatives through ensuring infected material does not pass into the company network through the employment process.
Some tips to avoid infected resume and other materials include:
The Society for Human Resource Management (SHRM) urges the review of security measures and external employment channels as part of the process to avoid infected application materials. Notes security professional Brian Huntley, "HR should review its external candidate communications channels, to reinforce awareness of the role that career websites and resume services play in the enterprise's candidate identification processes."
Another tactic is to join the movement away from resumes as the primary source of information about job candidates. Richer alternatives offer greater speed, security, and service during the recruitment process. Consider modes like:
Avoid the risk and increase your chances of finding the right hire by evaluating your exposure to damaging cyber attack. When you have questions about secure recruiting or onboarding software, give us a call.
About the Author, Jimmy Hurff
Jimmy is a seasoned technology executive & entrepreneur noted for leading business transformations. Over his 25+ year career, Jimmy has developed multi-platform expertise in the domains of engineering, data analytics, security, compliance & business transformation. Starting in 1995, Jimmy worked with his best friend, David Webb, to develop one of the world's first Internet job board and resume bank applications. From then to now, Jimmy has been consistently helping his customers to build great teams, using best practices and world-class technology.