The components of and need for cyber resilience

Issue 3 2022 Cyber Security, Security Services & Risk Management

Hayden Sadler.

Cybersecurity is a constantly evolving field, with new technologies opening new avenues for cyberattacks. Furthermore, while significant security breaches are frequently publicised, organisations need to learn how to improve their security posture and become more cyber resilient.

This rapid development and adoption of new technologies make it difficult for organisations to stay on top of and keep their cybersecurity programmes agile enough to react. This is due to known skills shortages that are difficult to quantify, specifically in the cybersecurity space. This makes it hard for organisations to find the right person, or even for a comprehensive cybersecurity task team to address a business-specific cybersecurity strategy in need of implementation.

However, what is important is that businesses must invest in world-class security development and training for employees tasked with overseeing security implementations. Dedicated budgets will aid in skills development on an ongoing basis. Although a versatile Head of Skills is a great resource, it is difficult for such an individual to provide attention to key areas or become a dedicated expert in a required skill.

Effective cyber resilience

Organisations need to implement a comprehensive cyber resilience solution with novel capabilities and better performance for modern data protection, backup, disaster recovery and business continuity to protect against ever-more complex and rising cyberthreats.

There is also the option of outsourcing; many third-party vendors and services companies can provide a much more focused and skilled approach to a business need, especially for implementing, maintaining, and incident response pertaining to cyber resilience. Cloud vulnerabilities are also a significant threat yet can be addressed through best practices being followed during implementation, alongside an understanding of whether the service provider or end-user business is responsible for mitigating them. Denial of Service (DoS) attacks designed to halt a business in their tracks are common, especially in politically motivated and grudge-driven attacks.

Cyber resilience must be a high priority

Outdated approaches such as basic search and monitoring are no longer sufficient, and rolling out standard anti-malware solutions is a common pitfall. The actual implementation of a security strategy needs to be followed up by a rigorous investigation and analysis of what was implemented. Locking down the expansion of these components will give organisations a sturdy grip on what has been rolled out in the infrastructure, thus mitigating unknown vulnerabilities.

Another pitfall is the assumption that a backup is a panacea to a cyberattack. However, the focus should be on how quickly the data can be safely restored. Large-scale recovery can be a lengthy process and thus have a negative impact on business. What can make a significant difference is having a consolidated backup with immutable snapshots, meaning the backup cannot be altered or deleted. Furthermore, recovery to the previous points-in-time can assist greatly, whereby the latest or best version of the backup can be recovered quickly with minimal downtime.

Organisations need to consider the need for a highly secure and effective authorisation and authentication process to safeguard external access. They need to also determine what is an acceptable use for business-supplied devices and appropriately lock down those devices . A resilient data protection strategy will need to be adopted too. This involves the backing up of data, implementing encryption, and regulating device use.

For more information contact Infinidat, [email protected],

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Be aware of privacy and cybercrimes issues
Security Services & Risk Management Cyber Security Retail (Industry)
Artificial intelligence (AI) is being deployed to help shoppers make better choices, but retailers must be aware of their obligations under personal privacy and cybercrimes laws.

From Hill Street Blues, to Hillbrow, to managing risk for BMW
Technews Publishing Editor's Choice News Security Services & Risk Management
Jane-Eleanor Morrison’s success story starts from growing up in the stressful pre-democracy times in KZN, moves through a successful career in SAPS. to BMW South Africa where she is now the risk control manager.

Poor router security makes SMBs vulnerable to attack
Cyber Security
While major malware and ransomware incidents frequently make headlines in the media, router vulnerabilities are not as frequently publicised, but the outcomes of these violations could be immensely damaging.

Cybercriminals eye South African SMEs lack of security
Cyber Security
Just as a business owner wouldn’t underinsure a tangible business asset such as a factory, SMEs shouldn’t leave their digital assets unlocked and in plain sight of criminals.

Harnessing the power of AI-driven XDR
Cyber Security
According to AIMultiple, 90% of infosec personnel in the U.S. and Japan said they’re anticipating an increase in these automated attack campaigns, due in no small part to the public availability of AI research.

Be prepared for the increase in reconnaissance
Cyber Security
Because ransomware has become so lucrative, cybercriminals are becoming more devious and putting significantly more energy into reconnaissance.

Cybereason expands presence across sub-Saharan Africa
News Cyber Security
Cybereason has appointed Chantél Hamman as its new channel director focused on growing the company’s presence across sub-Saharan Africa.

Look before you leap into a back-up power solution
Editor's Choice Security Services & Risk Management
Before you rush into purchasing a back-up power solution, you need to take a considered and long-term view of how to get yourself as close to grid independence as possible.

How to weather the approaching perfect storm
Cyber Security
Cybercrime is spiking and security skills are scarce, and small and medium enterprises (SMEs) are particularly vulnerable as the financial impact of falling victim to these security breaches can result in their total collapse.

Cyber resilience is more than security
Industrial (Industry) Cyber Security IT infrastructure
Kate Mollett, regional director at Commvault Africa advises companies to guard against cyberattacks in the shipping and logistics sector using an effective recovery strategy.