Stopping the next cyber attack

August 2015 Cyber Security, IT infrastructure

Doros Hadjizenonos, country manager of Check Point South Africa, explains how organisations can mitigate threats and how SA compares to the rest of Africa when it comes to cyber crime.

Doros Hadjizenonos.
Doros Hadjizenonos.

Given the ever-increasing sophistication of cybercrime methods, organisations must employ advanced assessment tools and practices to reduce or eliminate security gaps. The first step to a successful security posture is to know what your current security network looks like. It’s hard to strengthen a security foundation when you don’t know where the weaknesses are.

Cyber threats have gained a lot of media attention recently, and the perception that Africa is not likely to experience cyber attacks is false. Africa has one of the highest number of cyber attacks, which have mostly targeted government websites in Nigeria, Ghana and Senegal over the recent months.

Basie van Solms, director of the Centre for Cyber Security at the University of Johannesburg, says that South Africa is lagging behind Africa when it comes to adopting a stable cyber security policy and that there is a lack overall of a cyber security strategy and culture. The South African government has been criticised for not having a decisive policy and control over the growing problem of cyber crime, which cost the country over R3.4 billion in one year alone.

South African organisations, therefore, have an even greater reason to ensure their networks and data are protected – and it starts with understanding where they’re at. Organisations need to do a comprehensive assessment, which will evaluate the current state of the security network in all areas, from network architecture and security infrastructure and policy, to monitoring capability and incident response readiness. It will identify potential vulnerabilities and highlight gaps in security resources, capabilities and infrastructure. By conducting this evaluation, organisations will generate the information required to design a blueprint for fundamentally secure operations.

Teams should begin by examining the network architecture by looking at ingress and egress points. Specifically, they’ll want to check how many there are, where they are and how they’re used, as well as how they are protected, managed and controlled. Having a complete understanding of ingress and egress points is vital to maintaining the health of the security network.

Next, understand what critical services are required to run day-to-day business operations. Are they protected? What controls are in place to protect their operation? What is the most sensitive data for the organisation? Is this data being protected, and how? What controls are in place to protect access and fidelity? They’ll also need to decide what data should be encrypted while at rest and while in motion, a critical factor in the event of data theft.

Evaluate the segmentation of the network. Is the network segmented? If so, is the network segmented properly to prevent easy access across large portions of the network?

It’s also important to check all of the security controls that are in place. Some key design considerations for all security controls include where they’re deployed, whether they’re in detect or prevent mode, and if they’re set to block known attacks. Teams should also check if the controls are integrated to support the entire security infrastructure and whether they support user identity.

Having this assessment gives teams the knowledge they need to create a stronger security system. Once you have a full assessment of the network, you’ve completed the first step to stopping the next massive cyber attack.

For more information contact Check Point South Africa, +27 (0)11 319 7267, doros@checkpoint.com, www.checkpoint.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cyber futures in 2020
Issue 1 2020 , Cyber Security
MJ Strydom, managing director of cybersecurity specialist company, DRS, discusses what can be expected in 2020.

Read more...
Seven security trends for 2020
Issue 1 2020 , Cyber Security
What challenges await the security professional in 2020? Lukas van der Merwe looks at the trends for the year ahead.

Read more...
Security is not a single product solution
Issue 1 2020 , Cyber Security
Adopting a phased approach to security allows companies to develop a layered security posture to help control costs as well as the complexity.

Read more...
From physical security to cybersecurity
Access & Identity Management Handbook 2020, Genetec , Cyber Security, Security Services & Risk Management
Genetec discusses the security-of-security concept as a means to protect cameras, door controllers and other physical security devices and systems against cybercriminal activity.

Read more...
Minding the gaps to protect industrial PLCs from cyber threats
November 2019, AVeS Cyber Security , Cyber Security
PLCs, designed to control machinery and specific processes, were never built with cybersecurity threats in mind and protecting PLCs against these threats requires healthy isolation from the Internet.

Read more...
African trust centre launches cyber division
November 2019 , Cyber Security
Advancing cybersecurity to more stringent heights, LAWtrust has launched a new division focusing on cybersecurity services to complement its identity, encryption and digital signature offerings.

Read more...
What are the cybersecurity issues in video surveillance?
November 2019, Axis Communications SA , Editor's Choice, CCTV, Surveillance & Remote Monitoring, Cyber Security
he importance of the data captured by surveillance cameras – and what can be done with it – has led to a new breed of cybercriminals, looking for insights to steal and sell.

Read more...
Protecting the outer perimeter with cloud services
November 2019 , Cyber Security
Business leaders now have a choice whether they want to continue using their trusted firewall or move to a next-generation firewall delivered by appliances or as cloud services.

Read more...
Information security outsourcing service
November 2019, Condyn , Cyber Security
SearchInform launches information security outsourcing service for companies that face the problem of corporate fraud and data leakage.

Read more...
Block threats before they target your business
November 2019 , Cyber Security
The antivirus solutions of a decade ago are woefully inadequate weapons in the fight against today’s complex threats.

Read more...