Cyber Defense eMagazine August Edition for 2021

More documents

Recommendations

Info

4 Steps to Prepare for a Ransomware Attack: A C-Suite Guide By Rob T. Lee, Chief Curriculum Director and Faculty Lead at SANS Institute The increased threat posed by increasing ransomware attacks, including the latest Kaseya attack that impacted nearly 1,500 organizations, has forced the C-Suite to think differently about the possibility of compromised systems. In the aftermath of Colonial and JBS, this attack highlights the critical need for businesses to plan for these events. Just as business leaders have an emergency preparedness plan in a natural disaster, it is critical to implement one for ransomware. While these attacks had a substantial impact, quick action helped mitigate the scope of the damage. Had Colonial not quickly sprung into action, the effects would have exponentially increased if leadership had stalled on response. Flights out of the southeast were already making stops due to limited fuel at their originating airports. Had the situation remained uncontained for much longer, our transportation infrastructure, which was critical to helping distribute COVID-19 vaccines and other essential services, would have been even more crippled. Cyber Defense eMagazine – August 2021 Edition 56 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
But how can leaders prepare for a ransomware attack that could take an entire organization’s system offline? While CISA’s ransomware checklist is a great place to start, organizations should ready a comprehensive ransomware preparedness strategy ahead of time that be adapted depending upon the severity of an attack. Here are four steps leadership should follow in developing a ransomware response strategy. 1. Evaluate the Levels of Risk Ransomware Could Pose to Operations Ahead of Time and Conduct Tabletop Exercises Organizations need to understand where they are most vulnerable, from their most critical operations to other seemingly innocuous areas like HR or business records. In the case of Colonial, although the ransomware attack took down its payment system, company leadership also decided to shut down the pipeline’s oil production to mitigate damage. While some business operations may not be top of mind when thinking about potential ransomware impact, any business operation relying upon internet access is vulnerable. Organizations need to secure their most critical networks and think through how other business operations could be hampered by ransomware. If one segment of the business is compromised, it can have ripple effects across the entire enterprise. 2. Develop a Business Continuity Plan It is critical to create a business continuity plan (BCP) and a disaster response plan (DPR) before any cyber incident, particularly a ransomware attack. These plans are critical to ensuring an organization can move quickly to get business up and running in the aftermath of an attack and mitigate damage. What systems could be held up by ransomware? Is valuable organization data backed up and encrypted regularly? In high-stakes situations like ransomware attacks, company decision-makers must be involved from the get-go. Which leaders should be interested in these early-stage conversations? How will customers, key stakeholders, and the public be notified of the attack? Which entities should be engaged to help mitigate any additional risk? Having plans in place is imperative but practicing them is also equally as important. Tabletop exercises are critical to helping business leaders and managers get acquainted with the protocol beforehand. Knowing exactly who is responsible for what and what strategies should be deployed when is vital. Plans should be easily accessible, saved in a secure location, and even physically printed if an attack results in a total system compromise. Cyber Defense eMagazine – August 2021 Edition 57 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
Understanding The Importance of Des
Page 3 and 4:
From Security-Enhanced 5G Networks
Page 5 and 6: @CYBERDEFENSEMAG InfoSec Knowledge
Page 7 and 8: Cyber Defense eMagazine - August 20
Page 33 and 34: Understanding The Importance of Des
Page 35 and 36: 4. Is there some sort of final secu
Page 37 and 38: Evaluating Security Practices in Re
Page 39 and 40: After answering these questions and
Page 41 and 42: • Microsoft released patches for
Page 43 and 44: Four Ways Smart Cities Can Stay Saf
Page 45 and 46: From the technology perspective, th
Page 47 and 48: The Psychology of a Cybercriminal M
Page 49 and 50: Hacktivism One often-overlooked cyb
Page 51 and 52: A 2019 study revealed that 91% of e
Page 53 and 54: • Regularly check and update your
Page 55: ● ● Regulatory fines and penalt
Page 59 and 60: Black Market as Sustainable Ecosyst
Page 61 and 62: shopping centers, trade malls and t
Page 63 and 64: PKI Rises to the Challenge Using X.
Page 65 and 66: 7. Application Code Signing Code si
Page 67 and 68: Greater IT Freedom with Tighter IT
Page 69 and 70: Ninety percent of respondents say e
Page 71 and 72: A PETs-Enabled Path to Secure & Pri
Page 73 and 74: is important that all internal stak
Page 75 and 76: Automated scanning is not enough Ma
Page 77 and 78: continuous game of catching up each
Page 79 and 80: Top Tips Every SMB Must Know to Saf
Page 81 and 82: where hackers will either change a
Page 83 and 84: From Security-Enhanced 5G Networks
Page 85 and 86: of intelligence, the latter being d
Page 87 and 88: About the Author David Soldani rece
Page 89 and 90: The unpredictability component in c
Page 91 and 92: anticipating the blind spots of the
Page 93 and 94: Cybercrime is constantly on the ris
Page 95 and 96: How Much Will You Have to Pay to Be
Page 97 and 98: and California Consumer Privacy Act
Page 99 and 100: It’s Time to Issue Company Passwo
Page 101 and 102: Non-Enterprise Grade Communication
Page 103 and 104: How to Communicate with your employ
Page 105 and 106: Security Issues of Working Remotely
Page 107 and 108:
Another way a leak or theft can hap
Page 109 and 110:
However, new research finds almost
Page 111 and 112:
To Reduce Risk, Feds Need To Reeval
Page 113 and 114:
environment, designed to address wo
Page 115 and 116:
A penetration test has two typical
Page 117 and 118:
Black Box In the event of a real cy
Page 119 and 120:
which represent the highly polarize
Page 121 and 122:
5 Tips to Prevent a Security Breach
Page 123 and 124:
Secrets detection can be added in t
Page 125 and 126:
when it reaches its destination. Th
Page 127 and 128:
Maturity-Based Approach vs. Risk-Ba
Page 129 and 130:
To be successful in using a risk-ba
Page 131 and 132:
About eSentire eSentire Inc., is th
Page 133 and 134:
adjust score weights to ensure fina
Page 135 and 136:
Hostname-based pattern model Traffi
Page 137 and 138:
Cyber Defense eMagazine - August 20
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
You asked, and it’s finally here
Page 145 and 146:
9 Years in The Making… Thank You
Page 147 and 148:
show all

Cyber Defense eMagazine August Edition for 2021

Create successful ePaper yourself

Delete template?

Save as template?