classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2018


Cyber resilience is key to cybersecurity
February 2018, Cyber Security, Security Services & Risk Management

The current focus on ransomware is in itself dangerous, argues Jeremy Capell, executive: cyber resilience, Internet Solutions and ContinuitySA, because it deflects attention away from building an holistic response that includes recovery as well as prevention.

Jeremy Capell.
Jeremy Capell.

“The threat landscape is constantly mutating, and cybercriminals have enormous resources behind them. While security measures to prevent a breach remain important, organisations must devote even more resources to developing the ability to respond to, and recover from, an attack,” he says. “This cyber resilience is critical because chances are that an attack will succeed – how quickly the business can get back up and running will determine its sustainability.”

Capell says that cyber resilience means that cybersecurity can no longer be seen purely as an IT issue, but must be integrated into the broader business continuity and business resilience plan.

“Ultimately, the CEO and board are responsible for the organisation’s ability to continue trading after a disaster, so building a business that is resilient in the face of disaster is very much something they should be driving,” he argues.

When it comes to building cyber resilience, says Tim Quintal, senior product manager: cyber resilience, Internet Solutions, the Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST) offers a great blueprint. The NIST framework comprises five pillars:

• Identify. Manage and govern cybersecurity risk.

• Protect. Traditional firewalls must be supplemented with next generation security technologies such as intrusion prevention systems. E-mails are a key vulnerability, so anti-virus technology must be complemented by user education – the same goes for web security. It is also vital to protect end-point devices which can introduce malware onto networks via, for example, an infected USB. Proper patch management processes are also critical; WannaCry gained access via a vulnerability for which Microsoft had provided a patch several months earlier, so the damage caused was largely preventable.

• Detect. One technique is to deploy ­honeypots, or create clear vulnerabilities, to entice hackers into a quarantine area where they can be studied. Many attacks are undetected for extended periods so this area has a crucial role to play. For example, ransomware is increasingly activated only after an extended period of time, meaning that backups themselves are infected, thus hamstringing response and recovery.

• Respond. Because of cybercrime’s resources and the constant development of new technologies, the likelihood of a breach is real. The organisation must have a plan to respond to a breach, which would include crisis communications with stakeholders. A key element of any response would include proper disaster recovery and backups – the latter must be regularly tested. Response should also include feeding lessons learned into the cyber-resilience plan.

• Recover. Once the immediate response is under way, the organisation must have a strategy and capability for returning to normal operations.

Looking into the future, Capell warns that the constant advance in hacking techniques will accelerate. A growing threat is the emergence of the Internet of Things, which will see millions of scada and PLM devices connected.

“This ‘operational technology’ is typically designed by engineers using old DOS-based software and is intrinsically insecure – a myriad of back doors into corporate networks,” he concludes. “Those that build resilience into their organisations will be those that continue to prosper as technology’s march continues.”

For more information contact ContinuitySA, +27 (0)11 554 8050, cindy.bodenstein@continuitysa.co.za, www.continuitysa.co.za


Credit(s)
  Share via Twitter   Share via LinkedIn      

Further reading:

  • ASIS Security Technology Concepts day
    April 2019, Technews Publishing, This Week's Editor's Pick, Security Services & Risk Management
    ASIS SA kicked the tyres of a few technologies at its first Security Technology Concepts day in February.
  • Securing a reliable source of backup power
    April 2019, Drensky Technologies, Mustek Security Technologies, Specialised Battery Systems, Security Services & Risk Management
    Dependence on a reliable and stable source of electrical power is a part of everyday life, whether for an individual or a business.
  • The value of having a maintenance contract or SLA
    April 2019, Johnson Controls, Mustek Security Technologies, Security Services & Risk Management
    A maintenance contract or SLA offers a company peace of mind regarding the functioning of their security installation.
  • When cybercrime affects health and safety
    April 2019, This Week's Editor's Pick, Cyber Security
    The threat of a category-one cyber-attack is that everything could seem right – the readings on the meter could be fine, checklists would be followed, and equipment would work – yet danger could still unfold.
  • Biodegradable security seals for SA
    April 2019, TruSeal, This Week's Editor's Pick, Asset Management, EAS, RFID, News, Security Services & Risk Management
    The new TruSeal product extension is produced from a special biodegradable material sourced from Malaysia.
  • New service to fight cybersecurity threats to African banks
    April 2019, Cyber Security
    Foregenix is launching a service to combat the new and growing breed of cyber-attacks on African banks.
  • CCTV operators’ duties to response personnel at crime scenes
    April 2019, Leaderware, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Security Services & Risk Management
    Control room operators often have a responsibility to monitor response scenes that go beyond the initial detection and response relationship.
  • Cyber/physical perils in hospitality
    April 2019, Wolfpack Information Risk, This Week's Editor's Pick, Cyber Security, Entertainment and Hospitality (Industry)
    How can we prepare for our holidays and avoid becoming the victim of a scam or data breach?
  • Better energy savings than BMS
    April 2019, Johnson Controls, Integrated Solutions, Security Services & Risk Management
    Central plant optimisation software provides better energy savings than BMS control alone.
  • Cloud and mobile deployments are the weakest links
    April 2019, Check Point South Africa, Cyber Security
    Report highlights the cloud and mobile attack vectors used to target enterprises: nearly one in five organisations experienced a cloud security incident in the past year.
  • Rethink security priorities
    April 2019, News, Cyber Security
    Cryptocurrency mining is up 237%, phishing attacks increase by 269%, business email compromise attacks have gone up by 28%.
  • New supply chain attack
    April 2019, Kaspersky Lab, Cyber Security
    Kaspersky Lab has uncovered a new advanced persistent threat (APT) campaign that has affected a large number of users through what is known as a supply chain attack.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.