Security engineering – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

Why 360-degree visibility is vital to protect critical infrastructure

riskacademy — Tue, 03 Nov 2020 14:16:00 +0000

Aaron Ross, APAC Manager of Technical Services at Paessler, tells us without 360-degree visibility those responsible for safeguarding the sanctity of an organization’s data are flying blind. He says: “CIOs trying to solve the visibility issue are frustrated with too many complex, reactive solutions, which makes them vulnerable to sophisticated threats and attacks, as well as network downtime.”

360-degree visibility is a fundamental cybersecurity and IT risk management strategy that will help to protect critical infrastructure assets and sensitive information. But the increasing complexity of distributed enterprise networks makes this extremely challenging. Digital Transformation is increasing the complexity due to IT infrastructures becoming borderless. The key issue here is that you cannot protect critical infrastructure assets you cannot see.

According to a report by Deloitte – The Value Of Visibility – Cybersecurity Risk Management Examination, implementing a sound cybersecurity and IT risk management program is essential to protecting brands and can give organizations a jump in addressing mounting regulatory requirements.

This includes the Australian…

Cyberquake: Tectonic shifts boost cloud, access management and endpoint security

riskacademy — Sun, 23 Aug 2020 04:54:41 +0000

We have all lived the reality that COVID-19 has accelerated by at least two years many trends that were in motion well before the virus hit — and cybersecurity is no exception. Indeed, cloud security, identity and access management, and endpoint security collectively are one of the best examples where we have witnessed accelerated change.

Welcome to this week’s Wikibon’s CUBE Insights, powered by Enterprise Technology Research. In this Breaking Analysis we want to update you on the all-important security sector which remains one of the top spending priorities for organizations. Erik Bradley at ETR provided macro trend insights, great data and some anecdotal commentary from chief information security officers.

Shifting sands in the cybersecurity sector

For many years we’ve talked about the shifting patterns in networking, moving away from what’s often referred to as a “North-South” architecture – meaning a hierarchical network supporting age-old organizational structures. The network is flattening into an “East-West” model and the moat or perimeter has been vaporized. Thanks to COVID-19, the perimeter is now wherever the user is and the users are at…

Common Cybersecurity Mistakes Businesses Continue To Make

riskacademy — Mon, 20 Jul 2020 07:43:28 +0000

Successful cyber attacks can cost a business more than just millions of dollars. A breach in security may result in stolen data, diminished customer confidence, reputational harm and company downtime. Whatever kind of business you’re in, taking the right precautions for the network is critical to mitigating these risks. Keep reading for some frequent cyber security mistakes and how to avoid them.

One of the most common reasons for cyber attacks is neglected security awareness training.

Untrained personnel are prone to falling victim to phishing scams and giving up their login credentials. Be sure to offer educational seminars to teach employees how to identify threats and prevent them from infiltrating the network.The better informed your staff members are, the fewer mishaps the business will face.

Since ransomware and other types of malicious software are constantly evolving, it’s imperative to implement protection from the latest threats. If you lack a foolproof firewall or high-end security software, all it takes is a few hours of exposure to compromise the entire network. Consistently updating security software is one of the best ways to protect a company from cyber…

Maritime Industry Sees Increase in Cyber Attacks

riskacademy — Thu, 25 Jun 2020 20:28:42 +0000

Linn Freedman practices in data privacy and security law, cybersecurity, and complex litigation. She provides guidance on data privacy and cybersecurity compliance to a full range of public and private clients across all industries, such as construction, education, health care, insurance, manufacturing, real estate, utilities and critical infrastructure, marine, and charitable organizations. Linn is a member of the firm’s Business Litigation Group and chairs its Data Privacy + Cybersecurity Team. She is also a member of the Financial Services Cyber-Compliance Team (CyFi …

Secure at Sea: Is your vessel ready for IMO’s Cyber Security compliance?

riskacademy — Sat, 30 May 2020 22:08:46 +0000

Secure@Sea: by Corey D. Ranslem

Cyber security threats continue to be one of the top threats facing governments, businesses, and private individuals around the globe with attacks increasing exponentially on vessels and the maritime industry.

State and non-state actors perpetrate these attacks constantly around the clock and around the globe. Over the past few years, we have discussed cyber security-related issues in this column and their effect on the maritime industry. The IMO (International Maritime Organization) has put cyber security regulations in place for compliance by 2021. Many experts believe these will be the first of many regulations for the maritime industry when it comes to cyber security.

There are two specific documents the IMO has put forward regarding cyber security. The first document is MSC-FAL.1/Circ.3; Guidelines on maritime cyber risk management. This document is a guide on the basics of cyber risk management.

The Maritime Safety Committee (MSC), at its 98th session in June 2017, adopted Resolution MSC.428(98). This specifically addresses maritime cyber risk management as…