How to organize cybersecurity

Today, every action and every click on the internet is a potential risk. It's important to realize that every company is a target — regardless of size — so everyone has to defend themselves.

Today, every action and every click on the internet is a potential risk. It's important to realize that every company is a target — regardless of size — so everyone has to defend themselves. One option is the so-called "Left of Boom, Right of Boom" model. It rests on prevention before a cyberattack and ways to recover infrastructure after one.

What "Left of Boom" and "Right of Boom" mean

In cybersecurity, "Left of Boom" and "Right of Boom" describe proactive and reactive protection strategies, respectively.

"Left of Boom"

Refers to a proactive strategy aimed at preventing attacks. This includes user training, network security, etc.

"Right of Boom"

Defines a reactive strategy that takes care of restoring the infrastructure after an attack. This includes planning, backups, etc.

Left of Boom: proactive strategy

User training

A core part of the Left of Boom strategy is training and educating employees. This is a very often overlooked piece of cybersecurity, but it's one of the most important. Workshops or courses can help employees identify phishing emails and recognize other social engineering. On average, social-engineering training reduces the chance of a successful phishing attack by 75%.

Access control and authentication

Strict access control reduces the chance of total collapse. It also ensures employees only have access to the tools they actually need. This specific protection includes things like:

·         Accounts with the lowest possible privileges

·         Multi-factor authentication (MFA)

·         Single sign-on (SSO)

Regular updates

Outdated software is a frequent target for attackers, who exploit code-level bugs to bypass even the strongest security. A good way to make sure your software stays current is enabling auto-updates wherever your devices allow.

Network security and firewall

Firewalls are the first line of defence against attacks from outside the network. Install quality firewalls and intrusion-detection systems. The combination helps you trace and prevent any unwanted activity.

Regular security audits

Running regular security checks is essential if you want to keep your company up to date on protection. It also helps surface any errors or gaps in your security posture.

Right of Boom: reactive strategy

Worst-case plan

Having a specific, concrete worst-case plan — what to do after a cyberattack — is critical to a good recovery from that attack.

This plan should include:

·         Communication protocols

·         Quarantine protocol

·         Recovery steps

·         Contact numbers for IT specialists

It's also important to test and refresh your worst-case plan regularly.

Backup

Backing up important and sensitive data should always be a priority. Automated backups can save you in the event of an attack. I also recommend the 3-2-1 rule: 3 backups in 2 locations of one set of data.

Post-mortem of what failed

If someone has breached your company, it's very important to investigate how the attacker got in. Then learn from the mistakes you made and improve your cyber defence accordingly.