Cyber Defense eMagazine February Edition for 2022

usiness to maintain complete, centralised management of the system at all times and therefore ensure
complete control.
3. Ensure you are reducing malware exposure
Malware infections is frequently linked to user mistakes. Phishing and spoofing schemes have advanced
to the point where they can trick users into downloading innocuous-looking apps that contain hidden
attacks by sending them fake emails from trusted brands. These emails lure users in with fake news
stories, or very personalised offers, which leaves themselves and their companies open to attack. As well
as this in the past year there has been an increase in ‘smishing’ attacks which are threatening businesses
worldwide. Smishing is a form of ‘phishing’ using SMS or text messages instead of emails to entice
recipients to click on fake links which downloads malware onto their device.
On their own devices, users cannot be prevented from surfing the web, utilising social media, or
accessing personal email. How can you assist them in performing these routine duties in a safer manner?
Request that all staff read basic instructions and/or participate in training that covers common malware
attack strategies.
Employers should also teach users to double-check URLs in emails to ensure they are accurate, relevant,
and trustworthy. Also, think about deploying email security solutions that can help prevent malware and
phishing attacks from reaching employees' inboxes. It makes no difference if you have the world's most
secure security system. It only takes one inexperienced employee to be deceived by a phishing attempt
and hand up the information you've worked so hard to safeguard. Make sure you and your staff are both
aware of these specific email phishing examples, as well as all of the warning indicators of a phishing
attempt.
4. Back everything up regularly
What if your organisation already has a backup system in place? First and foremost, kudos on a job well
done; but, the task does not end there. It's critical to test your backup recovery process on a frequent
basis. It's pointless to back up data if you can't recover it. You'll know if your backup procedure is working
properly if you run that test on a frequent basis. It's not uncommon for a backup drive to run out of disc
space for no one to notice.
Performing a proper backup can be a challenging task. Therefore, backups should be included in your
business continuity plan. A business continuity plan, according to Travelers Insurance, is "a proactive
plan to avoid and manage risks associated with a disruption of operations."
It outlines the measures that must be performed before, during, and after an event in order for an
organisation's financial viability to be maintained. That implies that if your business systems are affected,
whether by a fire or flood in the office or, more recently, a cyber-attack, you'll have a plan in place to
Cyber Defense eMagazine – February 2022 Edition 54
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.