Cyber resilience is key to cybersecurity

1 February 2018 Information Security, Security Services & Risk Management

The current focus on ransomware is in itself dangerous, argues Jeremy Capell, executive: cyber resilience, Internet Solutions and ContinuitySA, because it deflects attention away from building an holistic response that includes recovery as well as prevention.

Jeremy Capell.
Jeremy Capell.

“The threat landscape is constantly mutating, and cybercriminals have enormous resources behind them. While security measures to prevent a breach remain important, organisations must devote even more resources to developing the ability to respond to, and recover from, an attack,” he says. “This cyber resilience is critical because chances are that an attack will succeed – how quickly the business can get back up and running will determine its sustainability.”

Capell says that cyber resilience means that cybersecurity can no longer be seen purely as an IT issue, but must be integrated into the broader business continuity and business resilience plan.

“Ultimately, the CEO and board are responsible for the organisation’s ability to continue trading after a disaster, so building a business that is resilient in the face of disaster is very much something they should be driving,” he argues.

When it comes to building cyber resilience, says Tim Quintal, senior product manager: cyber resilience, Internet Solutions, the Cybersecurity Framework developed by the National Institute of Standards and Technology (NIST) offers a great blueprint. The NIST framework comprises five pillars:

• Identify. Manage and govern cybersecurity risk.

• Protect. Traditional firewalls must be supplemented with next generation security technologies such as intrusion prevention systems. E-mails are a key vulnerability, so anti-virus technology must be complemented by user education – the same goes for web security. It is also vital to protect end-point devices which can introduce malware onto networks via, for example, an infected USB. Proper patch management processes are also critical; WannaCry gained access via a vulnerability for which Microsoft had provided a patch several months earlier, so the damage caused was largely preventable.

• Detect. One technique is to deploy ­honeypots, or create clear vulnerabilities, to entice hackers into a quarantine area where they can be studied. Many attacks are undetected for extended periods so this area has a crucial role to play. For example, ransomware is increasingly activated only after an extended period of time, meaning that backups themselves are infected, thus hamstringing response and recovery.

• Respond. Because of cybercrime’s resources and the constant development of new technologies, the likelihood of a breach is real. The organisation must have a plan to respond to a breach, which would include crisis communications with stakeholders. A key element of any response would include proper disaster recovery and backups – the latter must be regularly tested. Response should also include feeding lessons learned into the cyber-resilience plan.

• Recover. Once the immediate response is under way, the organisation must have a strategy and capability for returning to normal operations.

Looking into the future, Capell warns that the constant advance in hacking techniques will accelerate. A growing threat is the emergence of the Internet of Things, which will see millions of scada and PLM devices connected.

“This ‘operational technology’ is typically designed by engineers using old DOS-based software and is intrinsically insecure – a myriad of back doors into corporate networks,” he concludes. “Those that build resilience into their organisations will be those that continue to prosper as technology’s march continues.”

For more information contact ContinuitySA, +27 (0)11 554 8050, [email protected], www.continuitysa.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Local-first data security is South Africa's new digital fortress
Infrastructure Information Security
With many global conversations taking place about data security and privacy, a distinct and powerful message is emerging from South Africa: the critical importance of a 'local first' approach to data security.

Read more...
Sophos launches advisory services to deliver proactive cybersecurity resilience
Information Security News & Events
Sophos has launched a suite of penetration testing and application security services, designed to identify gaps in organisations’ security programs, which is informed by Sophos X-Ops Threat Intelligence and delivered by world-class experts.

Read more...
SA’s private security industry receives multi-million USD investment
News & Events Security Services & Risk Management
South Africa's private security sector has attracted significant international attention, with the world’s largest tactical flashlight manufacturer, Nextorch, announcing a major investment in its local operations, Nextorch Africa.

Read more...
Kaspersky highlights biometric and signature risks
Information Security News & Events
AI has elevated phishing into a highly personalised threat. Large language models enable attackers to craft convincing emails, messages and websites that mimic legitimate sources, eliminating grammatical errors that once exposed scams.

Read more...
Software security is a team sport
Information Security Infrastructure
Building and maintaining secure software is not a one-team effort; it requires the collective strength and collaboration of security, engineering, and operations teams.

Read more...
View from the trenches
Technews Publishing SMART Security Solutions Editor's Choice Integrated Solutions Security Services & Risk Management Residential Estate (Industry)
There are many great options available to estates for effectively managing their security and operations, but those in the trenches are often limited by body corporate/HOA budget restrictions and misunderstandings.

Read more...
IVA AI Pro Visual Gun Detection
Products & Solutions Surveillance Security Services & Risk Management Residential Estate (Industry)
Bosch has announced the launch of the IVA AI Pro Visual Gun Detection analytics based on deep learning. It is designed for automatic detection and classification of people and brandished firearms.

Read more...
IP-based horn loudspeakers
Products & Solutions Surveillance Security Services & Risk Management Residential Estate (Industry)
Bosch has announced the launch of its new IP-based horn loudspeakers and amplifier module: the high-output LHN-UC15L-SIP horn (for long-throw applications), the compact LHN-UC15W-SIP horn (for wide-angle coverage) and the AMN-P15-SIP amplifier module.

Read more...
SMART Estate Security Conference KZN 2025
Arteco Global Africa OneSpace Technologies SMART Security Solutions Technews Publishing Editor's Choice Integrated Solutions Security Services & Risk Management Residential Estate (Industry)
May 2025 saw the SMART Security Solutions team heading off to Durban for our annual Estate Security Conference, once again hosted at the Mount Edgecombe Country Club.

Read more...
Stronger cloud protection
Kaspersky Information Security Products & Solutions
Kaspersky has announced the release of an enhanced version of its Kaspersky Cloud Workload Security, delivering advanced protection for hybrid and multi-cloud environments.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.