classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2017


Cyber resilience is key to cybersecurity
February 2018, Cyber Security, Security Services & Risk Management

The current focus on ransomware is in itself dangerous, argues Jeremy Capell, executive: cyber resilience, Internet Solutions and ContinuitySA, because it deflects attention away from building an holistic response that includes recovery as well as prevention.

Jeremy Capell.
Jeremy Capell.

“The threat landscape is constantly mutating, and cybercriminals have enormous resources behind them. While security measures to prevent a breach remain important, organisations must devote even more resources to developing the ability to respond to, and recover from, an attack,” he says. “This cyber resilience is critical because chances are that an attack will succeed – how quickly the business can get back up and running will determine its sustainability.”

Capell says that cyber resilience means that cybersecurity can no longer be seen purely as an IT issue, but must be integrated into the broader business continuity and business resilience plan.

“Ultimately, the CEO and board are responsible for the organisation’s ability to continue trading after a disaster, so building a business that is resilient in the face of disaster is very much something they should be driving,” he argues.

When it comes to building cyber resilience, says Tim Quintal, senior product manager: cyber resilience, Internet Solutions, the Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST) offers a great blueprint. The NIST framework comprises five pillars:

• Identify. Manage and govern cybersecurity risk.

• Protect. Traditional firewalls must be supplemented with next generation security technologies such as intrusion prevention systems. E-mails are a key vulnerability, so anti-virus technology must be complemented by user education – the same goes for web security. It is also vital to protect end-point devices which can introduce malware onto networks via, for example, an infected USB. Proper patch management processes are also critical; WannaCry gained access via a vulnerability for which Microsoft had provided a patch several months earlier, so the damage caused was largely preventable.

• Detect. One technique is to deploy ­honeypots, or create clear vulnerabilities, to entice hackers into a quarantine area where they can be studied. Many attacks are undetected for extended periods so this area has a crucial role to play. For example, ransomware is increasingly activated only after an extended period of time, meaning that backups themselves are infected, thus hamstringing response and recovery.

• Respond. Because of cybercrime’s resources and the constant development of new technologies, the likelihood of a breach is real. The organisation must have a plan to respond to a breach, which would include crisis communications with stakeholders. A key element of any response would include proper disaster recovery and backups – the latter must be regularly tested. Response should also include feeding lessons learned into the cyber-resilience plan.

• Recover. Once the immediate response is under way, the organisation must have a strategy and capability for returning to normal operations.

Looking into the future, Capell warns that the constant advance in hacking techniques will accelerate. A growing threat is the emergence of the Internet of Things, which will see millions of scada and PLM devices connected.

“This ‘operational technology’ is typically designed by engineers using old DOS-based software and is intrinsically insecure – a myriad of back doors into corporate networks,” he concludes. “Those that build resilience into their organisations will be those that continue to prosper as technology’s march continues.”

For more information contact ContinuitySA, +27 (0)11 554 8050, cindy.bodenstein@continuitysa.co.za, www.continuitysa.co.za


Credit(s)
Supplied By: ContinuitySA
Tel: +27 11 554 8000
Fax: +27 11 554 8150
Email: info@continuitysa.co.za
www: www.continuitysa.co.za
  Share via Twitter   Share via LinkedIn      

Further reading:

  • What lies ahead in 2018?
    February 2018, Axis Communications SA, Cathexis Technologies, Forbatt SA, Milestone Systems, neaMetrics, Suprema, ZKTeco, G4S South Africa, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Access Control & Identity Management, Cyber Security, Integrated Solutions
    To find out what the physical security industry is expecting in 2018, Hi-Tech Security Solutions asked a few of the leading players what they expect in 2018 in South and southern Africa.
  • Cybersecurity trends 2018
    February 2018, Technews Publishing, This Week's Editor's Pick, Cyber Security
    Cybersecurity will remain a key issue for everyone in every industry this year. Here’s what some experts on the topic have to say.
  • TAPA SA conference 2017
    February 2018, This Week's Editor's Pick, Asset Management, EAS, RFID, Integrated Solutions, Security Services & Risk Management
    TAPA held its South African conference at Emperor’s Palace late last year. Hi-Tech Security Solutions was there to cover the event.
  • Decrypting encryption
    February 2018, Technews Publishing, This Week's Editor's Pick, Cyber Security, Integrated Solutions
    Encryption is undoubtedly useful, but has it advanced to the stage where it is also easily usable in business and consumer settings?
  • Tomorrow’s surveillance – today’s reality
    February 2018, Technews Publishing, Leaderware, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Cyber Security, News, Integrated Solutions
    The Crowne Plaza in Rosebank, Johannesburg, was the setting for the 2017 iLegal conference, a joint venture between Dr Craig Donald and Hi-Tech Security Solutions.
  • Cyber protection for SMEs
    February 2018, J2 Software, News, Cyber Security
    J2 Software has launched a packed solution aimed at helping SMEs get a handle on cyber threats.
  • Managing money for security
    February 2018, Cyber Security
    The industry at large has tightened its belts this year, and as we head into 2018 if 2017 has taught us anything then it is that we can’t afford to skimp on cybersecurity.
  • A quantum leap
    February 2018, Cyber Security
    What the future holds for business IT in 2018.
  • PAVIRO public address and voice evacuation system
    February 2018, Bosch Security Systems, Integrated Solutions, Security Services & Risk Management
    The PAVIRO system can address up to 984 zones with a total of 164 000 watts of amplifying power in one system, making the system suitable for bigger installations.
  • Cyberattacks will not go away
    February 2018, CA Southern Africa, Cyber Security, IT infrastructure
    Cybercrime will continue to grow – the issue for businesses is to determine “do the right people have access to the data they are entitled to access”?
  • Encryption is like beer goggles
    February 2018, Securicom IT Solutions, Cyber Security
    Encryption has become key to protecting the privacy of electronic communication, but it’s a bit like beer goggles, it makes everything look a lot rosier than it is.
  • LB20 commercial loudspeakers
    February 2018, Bosch Security Systems, Integrated Solutions, Security Services & Risk Management
    The LB 20 series is the latest member of the Bosch family of compact loudspeakers for installed applications.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.