Cyber resilience is key to cybersecurity

February 2018 Cyber Security, Security Services & Risk Management

The current focus on ransomware is in itself dangerous, argues Jeremy Capell, executive: cyber resilience, Internet Solutions and ContinuitySA, because it deflects attention away from building an holistic response that includes recovery as well as prevention.

Jeremy Capell.
Jeremy Capell.

“The threat landscape is constantly mutating, and cybercriminals have enormous resources behind them. While security measures to prevent a breach remain important, organisations must devote even more resources to developing the ability to respond to, and recover from, an attack,” he says. “This cyber resilience is critical because chances are that an attack will succeed – how quickly the business can get back up and running will determine its sustainability.”

Capell says that cyber resilience means that cybersecurity can no longer be seen purely as an IT issue, but must be integrated into the broader business continuity and business resilience plan.

“Ultimately, the CEO and board are responsible for the organisation’s ability to continue trading after a disaster, so building a business that is resilient in the face of disaster is very much something they should be driving,” he argues.

When it comes to building cyber resilience, says Tim Quintal, senior product manager: cyber resilience, Internet Solutions, the Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST) offers a great blueprint. The NIST framework comprises five pillars:

• Identify. Manage and govern cybersecurity risk.

• Protect. Traditional firewalls must be supplemented with next generation security technologies such as intrusion prevention systems. E-mails are a key vulnerability, so anti-virus technology must be complemented by user education – the same goes for web security. It is also vital to protect end-point devices which can introduce malware onto networks via, for example, an infected USB. Proper patch management processes are also critical; WannaCry gained access via a vulnerability for which Microsoft had provided a patch several months earlier, so the damage caused was largely preventable.

• Detect. One technique is to deploy ­honeypots, or create clear vulnerabilities, to entice hackers into a quarantine area where they can be studied. Many attacks are undetected for extended periods so this area has a crucial role to play. For example, ransomware is increasingly activated only after an extended period of time, meaning that backups themselves are infected, thus hamstringing response and recovery.

• Respond. Because of cybercrime’s resources and the constant development of new technologies, the likelihood of a breach is real. The organisation must have a plan to respond to a breach, which would include crisis communications with stakeholders. A key element of any response would include proper disaster recovery and backups – the latter must be regularly tested. Response should also include feeding lessons learned into the cyber-resilience plan.

• Recover. Once the immediate response is under way, the organisation must have a strategy and capability for returning to normal operations.

Looking into the future, Capell warns that the constant advance in hacking techniques will accelerate. A growing threat is the emergence of the Internet of Things, which will see millions of scada and PLM devices connected.

“This ‘operational technology’ is typically designed by engineers using old DOS-based software and is intrinsically insecure – a myriad of back doors into corporate networks,” he concludes. “Those that build resilience into their organisations will be those that continue to prosper as technology’s march continues.”

For more information contact ContinuitySA, +27 (0)11 554 8050, cindy.bodenstein@continuitysa.co.za, www.continuitysa.co.za



Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Stolen credentials on the Dark Web
October 2019 , Cyber Security, Security Services & Risk Management
Over 21 million credentials belonging to Fortune 500 companies, 16 million of which were compromised during the last 12 months, are up for sale.

Read more...
Stolen credentials on the Dark Web
October 2019 , Cyber Security, Security Services & Risk Management
Over 21 million credentials belonging to Fortune 500 companies, 16 million of which were compromised during the last 12 months, are up for sale.

Read more...
The importance of XDR for cyber protection
October 2019 , Cyber Security, Products
35% of South African organisations are expecting an imminent cyberattack and a further 31% are bracing for it to happen within a year, according to local research conducted by Trend Micro.

Read more...
Enterprise security must change
October 2019 , Cyber Security, Security Services & Risk Management
The recent wave of cyberattacks against local banks has highlighted the importance of protecting data against malicious users.

Read more...
Kaspersky uncovers zero-day in Chrome
October 2019, Kaspersky Lab , News, Cyber Security
Kaspersky’s automated technologies have detected a new exploited vulnerability in the Google Chrome web browser.

Read more...
Body-worn cameras transforming security
October 2019 , CCTV, Surveillance & Remote Monitoring, Security Services & Risk Management
Police Service Northern Ireland now has over 7 000 officers using 2 500 cameras covering approximately 173 000 incidents each year.

Read more...
Protecting your customers’ data
October 2019 , Training & Education, Security Services & Risk Management
Simon Murrell, head of development and executive director at BrandQuantum says companies need to protect their customers from identity theft and data breaches.

Read more...
Cybersecurity for video surveillance systems
September 2019 , Cyber Security, CCTV, Surveillance & Remote Monitoring
Video surveillance systems are increasingly accessible over any IP network, which has led to the rise of potential cyberattack.

Read more...
Cyber-securing your surveillance infrastructure
CCTV Handbook 2019, Genetec, Hikvision South Africa , Editor's Choice, CCTV, Surveillance & Remote Monitoring, Cyber Security
When it comes to cybersecurity, understanding the risks and the solutions as well as engaging in open communication helps everyone.

Read more...
Cybersecure surveillance partnership
CCTV Handbook 2019, Bosch Building Technologies, Genetec , Cyber Security, CCTV, Surveillance & Remote Monitoring
With Bosch and Genetec, you can feel confident that your data is protected by one of the world?s best security solutions, end to end, day after day.

Read more...