As the number of cyber attacks increase steadily, businesses must step up their defenses to protect one of their most valuable assets – data. In order to do so, they need to know where their weaknesses are, before implementing measures to plug those gaps.
At a recent Chubb webinar Paul Jackson from Kroll highlighted the 10 gaps in cyber security that organisations face:
Unpreparedness
With the increase in frequency and complexity of cyber incidents, organisations cannot afford to be unprepared anymore. Organisations must test their defenses before a breach occurs, and be ready to respond when required. Failing to expect and respond to breaches will come at a high cost as organisations struggle to resume business.
Unknown threats
To be prepared, organisations must know what the threats are. Knowing the enemy and assets available is key. Besides keeping abreast of the latest developments, organisations can also get intel from the Dark Web to know where their threats are.
Is it too late?
Attackers may have infiltrated an organisation’s network and are just waiting for the right opportunity to strike. It is recommended that organizations conduct active threat hunting to intercept these attempts, and stop attacks before they happen. Active threat hunting can be done if proper monitoring systems are in place, or via searches on the Dark Web to identify any weak links or exploited areas within the organisation.
Lack of monitoring
In order to ensure that threats are identified early on, organisations have to ensure that they have the right monitoring solutions in place. Anomalous behavior on the network and endpoints must be flagged at the onset to minimize the organisation’s vulnerability to attacks or fraud.
Open to Fraud
Where processes involve human contact, they will be vulnerable to fraud and misuse. Without proper monitoring in place, these business processes may be compromised.
Mobile / home / travel security
In modern organisations, employees commonly work on the go, or out of the office. This means that any form of cyber security implemented in the organisation must be extended beyond the perimeters of the office. Mobile devices and laptops must be secured and employees have to be made aware of the risks and response plans.
Third Party / Vendor Risks
Beyond the organisations’ systems and employees, it is also vital to ensure that the third parties and vendors you work with have robust cyber security measures and policies in place. Organisations should put in place a regular and structured method to review and assess the security levels of these external parties to ensure that attackers are not able to exploit these loopholes to access the organisation’s network.
Incident handling
When incidents do occur, organisations must ensure that they manage the crisis properly. A detailed crisis response plan should be in place, and well-rehearsed during “peaceful times” to ensure that everyone is aware of their roles and responsibilities. Mishandling of incidents can result in much higher costs and reputational damage, from which it may be challenging to recover.
Internet of things (IoT)
With increased connectivity across devices and systems via IoT, a once isolated attack is a much more serious issue these days. Attackers may be able to find ways to enter a particular system through another “door” which may be easier to access. This is tough to monitor, and disconnecting devices and systems is not even an option as the world continues to evolve.
People risk
Employees can be an organisation’s weakest link, but also its greatest defense. A malicious staff may sell confidential information, or even allow attackers entry into the organisation’s network. An ignorant employee may even unknowingly leave an “open door” for attackers. However, an employee who is aware of the risks and educated about signs to look out for in a breach, is an organisation’s first line of defense. Ensure that employees are familiar with the risks and responses.
“Prevention is better than cure” is an apt saying here. Organisations, big and small, should be prepared for cyber breaches. Being able to identify and stop these attacks before they happen will save them from incurring substantial costs, and irreparable reputation damage. If an incident does occur, Chubb has a swift and professional response plan that is part of the Cyber ERM policy.
