Preparing Your Employees & Business Systems For A Cyber Attack

Right now, a cyber attacks happens every 39 seconds and massive amounts of private business and customer data is stolen, however, securing your business against cyberattacks is less daunting than it may seem. With brief regular training and a few process implementations, you can keep your company from being a hacking statistic. 
 
Cybersecurity threats are  omnipresent in today’s hyper-connected, digital world and they will only continue to increase in sophistication, frequency, diversity, scale and scope this year and in the near future. Internet-based technologies aimed at creating efficiencies and increasing connectivity between people and places also help proliferate cyber threats and risks.
 
This new reality requires businesses and people alike to understand the evolving cyber threat environment in order to keep pace. With 2020 just beginning, an understanding of what future cyber threats could entail will help us better protect our systems, information, assets, and even reputation. While predicting the future is an imperfect task, an assessment of current threats, risks, and trends can help determine what we are likely to see moving forward. 
 
The recent high profile cyber-attacks on organisations like Travelex have raised awareness of how big cyber-crime is right now and it’s essential that you regularly assess and monitor your business risk against a cyber-attack. Yet despite significant cyber security exposures, around 85% of small business owners still believe their business is safe from hackers, viruses, malware or a data breach according to Symantec. Furthermore, only 25% of small business owners have had an outside party test their IT/computer systems to ensure they are secure from attacks and nearly 40% do not have their data backed up in more than one location.
 
As these attacks become more frequent, it is now more important than ever to protect yourself and your business. Unfortunately, there is no "quick fix" when looking to protect your business from a potential cyber-attack but there are some things you can do to help you prepare:
 
First: ensure your organisation has annual cyber audits that take place at different times of the year. 
Please contact Cyber Security Intelligence for sensible recommendations. 
 
Second: review your patching policy, ensure all updates are being applied as soon as they become available; do you ensure patches are applied as quickly as is practicable?
 
Third: train your employees to be aware of and identify potential phishing emails; do employees know what to look out for or who to report concerns too? Contact Cyber Security Intelligence for independent and economic Cyber Training recommendations dependent on your size and experience.
 
Fourth: test and review your back-up and recovery systems and processes; how quickly can you bring your organisation back online?
 
Fifth: review and test your incident response plan; does it work effectively, do the key stakeholders know what to do in the event of an incident?
 
The most common cyberattack on business and individuals alike are phishing scams. These are emails that are sent to people with the intention of creating a sense of fear or worry so they recipient will reply or click on an included link or attachment, which opens a door into your computer system and can lead to viruses. To create urgency, the email will often appear to be from a boss or a bank and demand a response. 
 
It is important that all employees are aware of the what phishing emails look like: 
  • An email address that looks familiar but is off by a letter or uses symbols instead of letters.
  • A request to click a link or open an attachment that you were not expecting.
  • Misspelled words (this is how they get past the spam filter).
  • Messages starting with something like “valued member” instead of saying your name.
It is also essential to keep in mind that while most cyber threats are external, dangers can also come from within your organisation. When you bring on new employees, complete a thorough background check for previous crimes, with an emphasis on theft, then hire accordingly. Employees should always lock their computers when they walk away and use complex passwords that include uppercase letters, numbers, and special characters.
 
If you’re concerned about the potential impact of a cyberattack on your business and would like to know what you can do to prepare, an onsite Cyber Security Audit is a useful process to analyse current security systems and controls. 
 
Please contact Cyber Security Intelligence for more information.
 
The Hill:          Kieghley News:       Host Review:
 
You Might Also Read:
 
The Scope Of A Cyber Security Audit:
 
 
 
« Wawa Breach - Data On 30m Card Users For Sale
Iowa Election App Vulnerable To Hackers »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Maryville Online - Cybersecurity Program

Maryville Online - Cybersecurity Program

The Cybersecurity Program at Maryville Online is designed to help students reach opportunities in cybersecurity leadership and management through an entirely online curriculum.

International School of IT Security (ISITS)

International School of IT Security (ISITS)

The International School of IT Security (ISITS) is a leading provider of professional training in the field of IT Security.

Clusit

Clusit

Clusit is the Italian Association for Information Security, a nonprofit organization devoted to promoting every aspect of information security.

National Defense Industry Association (NDIA)

National Defense Industry Association (NDIA)

The National Defense Industrial Association Cyber Division contributes to US national security by promoting interaction between the cyber defense industry, government and military.

AVL Mobile Security

AVL Mobile Security

AVL Mobile Security is a market-leading mobile security company for anti-virus and threat intelligence in the mobile Internet.

Zuratrust

Zuratrust

Zuratrust provide protection for all kinds of email related cyber attacks.

Pluribus One

Pluribus One

Pluribus One develops customized solutions and other data-driven applications to secure your business and your devices.

astarios

astarios

astarios provide near-shore software development services including secure software development (DevSecOps), quality assurance and testing.

Octo

Octo

Octo, an IBM company, is a technology firm dedicated to solving the Federal Government’s most complex challenges, enabling agencies to jump the technology curve.

GateKeeper Enterprise

GateKeeper Enterprise

The GateKeeper Enterprise software is an identity access management solution. Automated proximity-based authentication into computers and websites. Passwordless login and auto-lock PCs.

Hex-Rays

Hex-Rays

Founded in 2005, privately held, Belgium based, Hex-Rays SA focuses on the development of fast, stable, and robust binary analysis tools for the IT security market.

Information Services Group (ISG)

Information Services Group (ISG)

As a leading global research and advisory firm, ISG partners with our clients to determine a future vision, lead rapid change and realize the value of your digital investments at scale.

Oasis Technology

Oasis Technology

Oasis Technology are experts in cyber security. In addition to pioneering the game-changing TITAN anti-hacking device, we provide extensive cyber security consulting services.

Nokod Security

Nokod Security

Nokod Security delivers an application security platform for low-code / no-code custom applications and Robotic Process Automation (RPA).

LockMagic

LockMagic

Lockmagic is an information asset management solution to protect, track, audit and control accesses to sensitive information inside and outside your organization.

Eclypses

Eclypses

Eclypses has a disrupting cyber technology, offering organizations an advanced data security solution called MicroToken Exchange (MTE).