Question

Discuss some common cybersecurity risk response, change management, version control, and incident response processes that you might consider incorporating into the cybersecurity plan you will be creating for this week's individual assignment.

Are cybersecurity risk management processes similar from system to system? Where can you locate best practices for preventing or mitigating cybersecurity risk management threats?

Answer 1

Cybersecurity threat is a malicious act that seeks to damage data, hack data, steal data etc. Some of the risks are cyber attacks, malware attacks, cloud vulnerability, artificial intelligence enhanced cyber threats, hacking and physical threats.

1. Cybersecurity risk management takes the idea of real-world risk management and applies it to the cyber world. The process involved in this management may differ from system to system.

2. First identify the risk, assessing the impact of those risks and then apply actions and solutions to recover from that risk. Recognizing what can go wrong is the first step, called “Risk identification”. For this cyber security management plan should be developed in all the organizations.

3. Cyber risk cannot be eliminated, but it can be managed or mitigated.

4. Any additions, deletions or modifications in the configuration of systems or even staff members can change the management in cyber security.

5. Making changes in the electronic documents comes under version control, which is also an important factor in cyber security.

Measures to prevent or to manage cyber security threats:

1. The first step is risk identification. Next each risk is analyzed to determine the likelihood that it will occur and the damage that it will do if it does occur. Once this information is established, risks are ranked, by probability and impact. Finally, a plan is developed to manage those risks with high probability and high impact.

2. A Risk Mitigation, Monitoring and Management (RMMM) plan or a set of information sheets need to be produced.

3. Develop and implement risk reduction measures.

4. Be very vigilant about new and evolving threats and upgrade security systems to prevent them.

5. If risk is known in advance, then take plans to reduce the potential impact of those risks. Risks are difficult to eliminate, but can be controlled.

6. Give training to staffs regarding cyber security. All staffs should know how to use cyber security systems and how to handle it in case of risks.

7. If any cyber attack occurs, the cyber security team of that organization should respond immediately. The longer it takes to address the threat, the more damage may be done, that is speedy reaction to the event of risk.