Dealing with the people risk factor

Issue 7 2021 Security Services & Risk Management

The insider threat has become more complex to mitigate. Access control lists, both from a network and user perspective, as well as physical security of data storage have in the past been used to prevent breaches. The trouble nowadays is that data needs to be easily accessible and with that comes additional risk.


Peter Clarke.

Moreover, one would assume employees need to understand that they must be sceptical about emails and scrutinise the source to ensure they are from whom they purport to be. One would think with the amount of publicity around email scams that staff would be wary about clicking on links in emails, but it is still one of the most successful routes into a company’s confidential data.

Damaging behaviours like this and oversharing on social media, or believing requests delivered through electronic channels without first verifying them, remain common access points for threat actors.

Mimecast research revealed that the most pressing security concerns remain focused on data breaches, phishing, spear-phishing and ransomware. The report notes that these are all areas in which good security awareness training can be highly effective at reducing risk.

Tools to help prevent the threat from within

Multi-factor authentication(MFA) is an effective and relatively inexpensive way to limit access to data. Users are required to verify identity through an authentication code before company resources can be accessed. This can be deployed via SMS, or better still, a more efficient authenticator app.

Switches: this technology has been around for some time. If the right hardware is in place, one could look at deploying technologies such as 802.1x where every device on the network needs to be authenticated before it can gain access to network resources.

Data leak prevention(DLP) is something that most well-known firewall brands should have enabled. Depending on the technology being used, DLP allows you to prevent sensitive information, such as bank account details; ID numbers etc., from leaving your network.

Zero trust: Attackers that breach the perimeter one way or another are either a staff member or impersonate an insider. As such the ‘Zero Trust’ security model is being adopted at a fast rate globally. The Zero Trust model was created in 2010 by a principal analyst at Forrester. Today it is repeatedly implemented as organisations scramble to protect enterprise systems against increasingly sophisticated attacks. The focus for organisations should be to work on a Zero Trust network model.

Phishing protection and education</i>: One of the best defences for phishing attempts is education. Threat actors are finding ways to bypass mail and other security systems by composing authentic looking mails and directing users to authentic looking, as well as genuinely authentic websites. These sites would then ask for sensitive information, which is promptly sent to the attacker.

Simple things for staff to look out for include:

1. If something looks too good to be true, it probably is. Do some research and ask around to verify.

2. If a staff member is not expecting a PO or payment instructions from someone, report it to IT immediately.

3. If a staff member sees that a CFO, or other high-ranking exec has asked them to expedite a payment, they must confirm that the mail originated from the specific address and is from the true source, or, if suspicious, report to IT immediately.

Edge protection: Protecting the network edge has become more important than ever because of the increasing number of endpoints organisations rely on, including but not limited to desktops, laptops, mobiles and IOT devices. As networks expand so does the potential attack service.

At an absolute minimum, a well-configured next-generation firewall needs to be put in place that makes use of web filtering, application control and intrusion prevention to aid in the protection of the network edge. Larger organisations may need to look at specific appliances such as Web Application Firewalls and Application Delivery controllers for additional layers of security – the one caveat is that this approach can be quite costly.

Server and data centre security: This area has several similarities to edge protection in that servers and data centres are still sitting on their own network edge. Depending on requirements, a capable next-generation firewall should be one of the first things to look at deploying. Dedicated security appliances for web and application security can be an asset. Servers and data centre resources are generally more exposed to threats as this is where most of an organisations’ crucial data or applications sit.

Anti-virus might seem like an obvious thing to consider, but there are several things that organisations can overlook. You need to consider if the AV solution you are using is designed to be run on server infrastructure. Servers are far more complex by design than a normal PC and often run applications and systems that need AV solutions that can work with these.

Lastly, backup: this is of the utmost importance.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SAFPS issues SAPS impersonation scam warning
News & Events Security Services & Risk Management
The Southern African Fraud Prevention Service (SAFPS) is warning the public against a scam in which scammers pose as members of the South African Police Service (SAPS) and trick and intimidate individuals into handing over personal and financial information.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
How can South African organisations fast-track their AI initiatives?
AI & Data Analytics Security Services & Risk Management
While the AI market in South Africa is anticipated to grow by nearly 30% annually over the next five years, tapping into the promise and potential of AI is not easy.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Stallion repositions itself as a services provider
News & Events Security Services & Risk Management
Stallion has rebranded as Stallion Integrated Solutions to reflect its expanded capabilities beyond traditional security services to delivering integrated solutions that enhance safety, asset management, and operational efficiency.

Read more...
Seven tips to help ensure your backup batteries work
Power Management Security Services & Risk Management
Load shedding is back, officially or not. Lance Dickerson offers seven tips to prolong the life of your power backup systems and ensure they perform as intended when needed.

Read more...
Cybersecurity best practice
Information Security Security Services & Risk Management
Breach and attack simulation has become an essential element of cybersecurity strategies in any modern business by allowing companies to actively detect and resolve vulnerabilities through real-world attack simulations.

Read more...
Historic Collaboration cuts ATM Bombings by 30%
Online Intelligence Editor's Choice News & Events Security Services & Risk Management
Project Big-Bang, a collaborative industry-wide task team, has successfully reduced ATM bombings in South Africa by 30,7% during the predetermined measurement period of November, December and January 2024/5.

Read more...
Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...