Cyber Defense eMagazine December Edition for 2021

1. Build a strong cybersecurity foundation
When thinking of cybersecurity, it’s natural to think of the innovative technologies available on the market
today. However, there are so many steps that should be taken in-house to help to establish a secure
network before introducing these additional technologies. Building the foundation for protecting your data
starts with the basics, especially considering that these advanced technologies can only do so much if
the foundation is not set.
Patching, having secure configurations and following password best practices, such as ensuring strong
password hygiene across the organization and incorporating two-factor authentication, are all basic
needs to ensure a hacker cannot easily gain access to a network. While these may seem small, the
protection they offer is mighty and effective, and with these measures in place, advanced technologies
can be implemented in parallel to help build a stronger, forceful security posture for the overall
organization.
2. Stay “in the know”
With the increase in cyberattacks, the government has been busy introducing new regulations and
compliance standards. These will likely not go away – in fact, they will likely become stricter, with heavy
fines for those organizations who do not comply. Being aware of the current state of the industry and the
threats impacting fellow businesses can help you to understand what the risks are, how you can protect
yourself and what may be introduced into the regulatory landscape in the near future.
For example, it’s no secret that the need for a single platform that can both detect and respond to a threat
is greater than ever before. Some organizations are finding that by integrating Security Information and
Event Management (SIEM) with Security Operation Automation and Response (SOAR), they can help
introduce the automation necessary to respond to even the most complex threats quicker than ever
before, minimizing the need for human intervention. This reliable, automated protection enables
organizations to respond in real-time and provides them with the situational awareness necessary to help
predict the following phase of an attack.
Technology like this is actively changing the industry and the way organizations prepare for ransomware
attacks. Being aware of these types of innovations can help an organization better understand the
benefits, help a business stay ahead of the industry trends and be ready for when these technologies
become the regulatory standard in cybersecurity.
3. Don’t forget about transparency
As with any business challenge, being open and communicative is the only way to ensure alignment
across teams. From security operations to IT and enterprise risk management, aligning on objectives is
critical to ensure any and all gaps are covered in the protection of the organization. Without consistent
collaboration and transparency between each lead department, the likelihood of an attack only increases,
jeopardizing the critical data within the network.
Cyber Defense eMagazine – December 2021 Edition 64
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.