Test Your Response Plan to Prepare for Cyber Attack

The survey identified nine best practices that could keep the costs of a breach under $500,000 or even less than $100,000. These tasks include:
  1. Review and improve cyber monitoring practices regularly, formally, and strategically over time
  2. Regularly review connection activity on the network to ensure that security measures are working as intended
  3. Integrate security into the organization's goals and business capabilities
  4. Routinely and systematically investigate security incidents
  5. Put tools in place to provide feedback about security practices
  6. Increase security controls on high-value assets as necessary
  7. Integrate security technologies 
  8. Keep threat detection and blocking capabilities up to date
  9. Make it easy to determine the scope of a compromise, contain it, and remediate 
The survey found that there is a tangible ROI in implementing a baseline patch policy. Forty-six percent of respondents were more concerned about unpatched vulnerabilities in this year's survey, compared with 30% last year. Breaches caused by unpatched vulnerabilities resulted in more data loss as well. Thirty-eight percent of organizations that lost data this way said the impact was 10,000 data records or more. Among companies who hadn't suffered a breach from an unpatched vulnerability, only 27% lost 10,000 or more records. 

Comments

Post a Comment

Popular posts from this blog

Make Cybersecurity Your Employees’ New Year’s Resolution

Has your organization has taken the necessary steps to improve its cybersecurity posture for this year? Here are 6 strategies you can deploy throughout your company to strengthen its security for the rest of the year – and beyond. 1) Introduce training in the on-boarding process – and repeat once a quarter. A common mistake that companies make is only requiring employees to complete one security training session when they begin working. Regular training throughout the year is imperative to ensure that employees are consistently being aware of possible cyber-attacks. Interns, to mid-level managers, to senior executives should all be taking part in  the training . 2) Reward employees for safe and secure online practices.   There’s no better way to encourage your employees to make security a priority than an incentive. If they are being rewarded and acknowledged, that will not only increase their motivation but motivate colleagues as well. You can even s...
Read more

Cyber Threat Hunting

Threat hunting is the practice of proactively searching for cyber threats that are lurking undetected in a network.  Cyber threat hunting digs deep to find malicious actors in your environment that have slipped past your initial endpoint security defenses. After sneaking in, an attacker can stealthily remain in a network for months as they quietly collect data, look for confidential material, or obtain login credentials that will allow them to  move laterally across the environment . Once an adversary is successful in evading detection and an attack has penetrated an organization’s defenses, many organizations lack the advanced detection capabilities needed to stop the  advanced persistent threats  from remaining in the network. That’s why threat hunting is an essential component of any defense strategy. Threat Hunting Methodologies Threat hunters assume that adversaries are already in the system , and they initiate an investigation to find unusual b...
Read more