Cyber Defense eMagazine June 2021 Edition

More documents

Recommendations

Info

Based on that map and these checkpoints, do some demarcation. Zoning will help you to contain malicious activities. For example, use fire zones or anything similar established in the physical world of production as a way to map cut-off points for a certain area. These checkpoints (which are likely firewalls or L3 switches) as well as the many assets and devices in your OT and IT environment are then part of the Check sequence, that is to monitor them for changes from that overall baseline and secure configuration you established. Check Uncontrolled changes are the main cause for cyber incidents, regardless of whether the malicious change happens in the OT world or in the IT space. The ability to detect any change, as provided in the DO cycle, will allow to run automated checks. Pre-approved and ideally pre-tested changes should go through that check without raising any alarm, unless there are any deviations from what was expected. Unplanned changes will be verified against known good and bad samples to identify malicious or suspicious events, which are then followed through in the security workflow established in the PLAN phase. Changes in IT occur frequently in contrast to changes to OT equipment, which are less frequent, but conversely the impact of a malicious change can have real-life consequences. Make sure that changes on critical assets and on critical processes are accounted for. Operating from a Secure Baseline makes the detection of unplanned integrity changes much clearer and allows the process to be automated using system integrity monitoring technology. Any unknown device showing up in your monitoring is a change that needs to be acted upon, as that indicates a gap in the PLAN and DO phase. Act / Adjust The automated monitoring will allow you to act upon any gaps identified going through the PLAN stage again, now including the previously unknown elements. It also enables you to make the necessary adjustments when major changes to an existing production process or new business processes or even new business models are introduced. Update your plans and maps, including your Secure Baseline with any changes to software, patches, or network ports, then adjust your incident handling where needed, and start the cycle again. Cyber Defense eMagazine – June 2021 Edition 70 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
About the Author Dirk Schrader is the Global Vice President of Security Research at New Net Technologies (NNT). A native of Germany, Dirk Schrader brings more than 25 years of delivering IT expertise and product management at a global scale. His work focusses on advancing cyber resilience as a sophisticated, new approach to tackle cyberattacks faced by governments and organizations of all sizes for the handling of change and vulnerability as the two main issues to address in information security. Dirk has worked on cyber security projects around the globe, including more than 4 years in Dubai. With technical and support roles at the beginning of his career, his career path includes sales, marketing and product management positions at large multinational corporations, as well as small startups. He has published numerous articles in German and English about the need to address change and vulnerability to achieve cyber resilience, drawing on his experience and certifications as CISSP (ISC²) and CISM (ISACA). His recent work includes research in the area of medical devices where he found hundreds of systems unprotected in the public internet, allowing access to sensitive patient data. Dirk can be reached on Twitter @DirkSchrader_ and at our company website https://www.newnettechnologies.com/. Cyber Defense eMagazine – June 2021 Edition 71 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Key Business Lessons Learned from T
Page 3 and 4:
Clean Water Shows Us Why Cyber Cert
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - June 2021
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20: Cyber Defense eMagazine - June 2021
Page 33 and 34: Exploiting Vulnerabilities Back in
Page 35 and 36: Data Loss Prevention in Turbulent T
Page 37 and 38: ● ● ● ● ● Which sensitive
Page 39 and 40: A Digital Journey: A Long and Windi
Page 41 and 42: Unfortunately, some in IT may miss
Page 43 and 44: Why Ensuring Cyber Resilience Has N
Page 45 and 46: In terms of data safeguards, some o
Page 47 and 48: Case studies Recently, the GRIMM in
Page 49 and 50: About the Author Adam Nichols is th
Page 51 and 52: With 3G and 4G, mobile operators an
Page 53 and 54: Don’t Wait, Automate How An Indep
Page 55 and 56: configuration, but also for faster
Page 57 and 58: Data breaches can lead to huge fina
Page 59 and 60: Whom Do You Give Access to Communit
Page 61 and 62: Reapproaching Cybersecurity in A Di
Page 63 and 64: isk having to pay any fines? The an
Page 65 and 66: Penetration testing essence Being o
Page 67 and 68: In a nutshell Brand reputation and
Page 69: Plan Planning for ICS Security need
Page 73 and 74: Joseph Carson, chief security scien
Page 75 and 76: 1. Educate your people on the impor
Page 77 and 78: we’ve dealt with many breaches th
Page 79 and 80: Clean Water Shows Us Why Cyber Cert
Page 81 and 82: How Can You Protect the Security Pe
Page 83 and 84: Best Practices for Mitigating Insid
Page 85 and 86: Why We Care About Cybersecurity Hyg
Page 87 and 88: The Third-Party Remote Access Secur
Page 89 and 90: Evaluating Third-Party Security Pra
Page 91 and 92: wake of the massive SolarWinds atta
Page 93 and 94: · Rethinking Unattended Access Day
Page 95 and 96: About The Author Ryan Heidorn is a
Page 97 and 98: In the traditional fortress model,
Page 99 and 100: Threat Hunting: Taking Action to Pr
Page 101 and 102: posture built on anticipating the u
Page 103 and 104: • Organizations depend upon CISOs
Page 105 and 106: Two Sides of the Same Coin: Providi
Page 107 and 108: security protocols. Given the const
Page 109 and 110: In this article, we will explain wh
Page 111 and 112: Protect Your Business from DDoS Att
Page 113 and 114: Undermining Public Trust The cycle
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
FREE MONTHLY CYBER DEFENSE EMAGAZIN
Page 127 and 128:
Page 129:
show all

Cyber Defense eMagazine June 2021 Edition

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?