By Oscar Michel, Masters in Journalism, DCU.
Cyber-security is more threatened than ether. High-profile global ransomware like WannaCry or Petya have attacked the world. What good tips should be given to businesses on how to manage their security?
According to a report written by BT and KPMG, firewalls and antivirus protection are essential for good security. Companies are often scared of hacking and spend a lot of money on IT security products. Firms should first follow the guidance issued by the UK’s National Cyber Security to understand where investment is needed.
“The global scale of the recent ransomware attacks showed the astonishing speed at which even the most unsophisticated of attacks can spread around the world. Many organisations could have avoided these attacks by maintaining better standards of cyber hygiene and getting the basics right. These global incidents remind us that every business today – from the smallest sole trader through to SMEs and large multinational corporations – needs to get to grips with managing the security of their IT estate, as well as their people and processes. This report aims to help secure the digital enterprise by navigating businesses through their cyber security journey” said Mark Hugues, CEO of BT Security.
Organisations should take the responsibility of maintaining high standards of cyber hygiene. Businesses must invest in training to raise awareness amongst staff. This can help turn employees from the weakest point in any security chain into every company’s greatest asset in the fight to protect data. The report also added that security gaps can be created by overly complicated IT architecture. Simplicity is key.
The report also argues that overly complex IT architecture can worsen security gaps. This is especially the case if the technology deployed is too difficult to use or there’s a lack of integration.
“The recent spate of cyber-attacks is keeping cyber risk at the top of the business agenda, and as such investments are being made. The business community needs to avoid knee-jerk reactions as cyber security is a journey – not a one size fits all issue, and getting the basics like patching and back-ups right matters. It’s important to build a security culture, raise awareness amongst staff, and remember that security needs to enable business, not prevent it. Cyber threats are evolving and businesses face ruthless criminal entrepreneurs. The solution isn’t jargon ridden technology silver bullets but one that involves a community effort in a world where business boundaries are vanishing. With criminals getting increasingly creative about finding the weakest link, the CISOs of the future need to care about digital risk, help the business seize opportunities and build cyber resilience” added David Ferbache, Technical Director in KPMG’s cyber security practice