Question

The increasing number of cybersecurity attacks by hackers with many different objectives requires companies of all sizes to implement a cybersecurity defense program. Such a program may include objectives to identify, protect, detect, respond and recover from threats. Assume that you are advising an organization that is implementing a cybersecurity defense program. What processes/systems/controls would you recommend for each of the objectives noted?

Answer 1

Objectives to identify cyber attacks

Cyber security is the practice of ensuring the integrity, confidentiality and availability (ICA) of information. It represents the ability to defend against and recover from accidents like hard drive failures or power outages, and from attacks by adversaries. The latter includes everyone from script kiddies to hackers and criminal groups capable of executing advanced persistent threats (APTs), and they pose serious threats to the enterprise. Business continuity and disaster recovery planning are every bit as critical to cyber security as application and network security.

Security should be top of mind across the enterprise, and come with a mandate from senior management. The fragility of the information world we now live in also demands strong cyber security controls. Management should see that all systems are built to certain security standards and that employees are properly trained. All code, for example, has bugs, and some of those bugs are security flaws. Developers are only human, after all.

Protection From Cyber Attacks

• Encrypt the data
• Use Strong Password
• Use Antivirus
• Firewall
• Update Operating Systems
• Intrusion Detection Installation
• Back up your data
• Access Restricted Information
• Appoint Security Expert

The era of internet and technology has brought with itself numerous benefits along with some risks. Cyber attacks have become common and the majorities at threat are businesses. The above tips are well-tested and have helped the businesses to run safely. In the 21st century, the security investments are significant. So make your business immune against insidious attacks by employing these tips. By this, your business will be secure and you will be relaxed

How to detect Cyber attacks

• Identify mysterious emails
• Note unusual password activity
• Identify suspicious pop-ups
• Report a slower-than-normal network
• Keep software up-to-date

How to Respond to Cyber Attacks

• Get Your Incidents Response Team Ready to Act
• Secure Your IT Systems
• Set Your Backups in Motion
• Notify the Authorities

How to recover from cyber attacks

To contain and remove the issue, your IT department should be ready to spring into action. To ensure that they are prepared for such a task, any business owner should hire a cybersecurity specialist or send their IT staff for cybersecurity training. They should be prepared to:

• Separate sensitive data from the network. If banking and login information is not encrypted, do so now.
• Reset all affected logins. All parties affected by the cyberattack should have their login details changed and the new passwords should be secure in that they have uppercase letters, lowercase letters, symbols and numbers. Also consider using two-factor authentication to tighten up security.
• Reinstall affected files. Any programs that have been affected by the attack should be uninstalled and reinstalled so that the infection cannot spread.
• Disconnect affected hosts. Once it has been disconnected, the host is no longer available and can no longer be subjected to the cyberattack.
• Apply security patches if necessary. This software is designed to update any programs or operating systems, fixing vulnerabilities and other bugs that could compromise your online security.
• Remove all files installed by the attack. After they have been isolated, your IT analysts will investigate them to gain a better understanding of the attack, potentially identify the attacker and identify any security vulnerabilities.

• Inform your customers promptly

• Prevent future breaches

• Tighten up your legal defense

?

Being prepared and acting quickly are vital to helping your company recover from a cyberattack as effectively as possible. Your customers will appreciate that you’ve taken action promptly to protect them, which goes a long way to maintaining a successful and profitable business in light of a data breach.