NEWS & INSIGHTS

Amidst the geopolitical heightened tensions these days, there is an increased number of cyberattacks against public and private organizations. Due to the connected and highly complex technology environment, with dependencies on supply chains, it has become increasingly challenging to completely prevent incidents that may disrupt business operations and for this reason, cyber resilience is of paramount importance.

Cybersecurity and Infrastructure Security Agency (CISA) suggests that organisations must focus on preparedness and coordinated response to mitigate the impact of cyberattacks. Below are 5 urgent focus areas for every CEO:

Empower your Chief Information Security Officers (CISO): In any organization, security improvements are weighed against the cost and operational risks to the business. In this heightened threat environment, senior management should empower CISOs to help determine the risks to the business and ensure that the entire organization understands that security investments are a top priority in the near term.

Lower Reporting Thresholds:  Every organization should have documented thresholds for reporting potential cyber incidents. In this environment of heightened threats, these thresholds should be significantly lower than normal. Senior management should establish an expectation that any indications of malicious cyber activity, even if blocked by security controls, should be reported.

Participate in a Test of the Response Plans:   Cyber incident response plans should involve not only your security and IT teams but also senior management and board members. If you have not already, senior management should participate in an exercise to ensure they are familiar with how your organization will manage a major cyber incident, not only for your organization but also for the companies within your supply chain.

Focus on Continuity: Given limited resources, security and resilience investments should focus on the systems that support critical business functions. Senior management should ensure that such systems have been identified and that continuity testing has been performed to ensure that critical business functions remain available after a cyberattack.

Plan for the Worst:  Companies should plan for extreme but plausible scenarios. Senior management should ensure that key actions can be taken to protect the organization’s most critical assets in the event of an attack, including shutting down vulnerable parts of the network if necessary.

Quadprime has set new standards of comprehensive cybersecurity services which address the above concerns. If you need help talk to us.