Tag Archives: Cyber Resilience

Social engineering “a top cause of cyber incidents” finds Cyber Resilience Report

Research commissioned by Crises Control from the Business Continuity Institute for its annual Cyber Resilience Report 2016 confirms much of what we already suspected about the changing nature of the cyber threat and the way that cyber criminals have found new ways to defeat corporate perimeter security.

66% of respondents to the survey reported that their companies had been affected by at least one cyber security incident over the last 12 months. The costs of these incidents varied greatly, with 73% reporting total costs over the year of less than €50,000, but 6% reporting annual costs of more than €500,000.

The increased difficulty of breaching perimeter security and the increased human resources available to cyber criminals has combined to produce a new point of attack. This is focused on the weakest link in the corporate security chain, which is now human beings rather than technology.

The term ‘social engineering’ describes this attack vector, which relies heavily on human interaction and often involves tricking people into breaking normal security procedures. The BCI research shows clearly that phishing (ie obtaining sensitive data through false representation) and social engineering is now the single top cause of cyber disruption, with over 60% of companies reporting being hit by such an incident over the past 12 months.

A further 37% were hit by spear phishing (ie phishing through identity fraud).

BCICyber

The research has also confirmed that, to effectively counter this threat, companies now need behavioural threat detection provided by a cyber security network monitoring solution. These plug-in devices monitor your network for signs of suspicious insider activity and failed attempts to hack into the system.

They can also provide invaluable intelligence to be acted upon proactively to nip a successful hack or insider threat in the bud.

Traditional anti-virus monitoring software is no longer enough. The BCI research shows that 72% of companies have this software in place, but only 26% of real cyber security incidents were actually discovered through this route. Much worse, 18% of incidents came to attention through an external source such as a customer, a supplier or the impact on a public website.

Network monitoring solutions are much more effective than anti-virus software in terms of alerting companies to a cyber breach, with 63% of businesses having network monitoring software in place and 42% of cyber incidents being brought to attention through the work of the IT Department to whom such systems report.

The scale of the cyber threat can feel overwhelming at times, but educating your own employees about the nature of the threat and then putting in place the right solutions can go a long way towards mitigating the social engineering threat and significantly enhancing your corporate cyber resilience.

The message is simple… Act now before it’s too late.

Advertisements

Leave a comment

Filed under Risk UK News

Advent IM outlines detail for ‘Cyber for the C-Suite’ Breakfast Seminar

A breakfast seminar created exclusively for business leaders and senior Board members seeking guidance on the present cyber security threat is to be run by security consultancy Advent IM at the company’s Training Centre near the M5, Birmingham on 7 December.

With many years’ experience in senior level consulting, training and mentoring, the seminar will be delivered by Advent IM’s managing director Mike Gillespie, who’s also director of cyber strategy and research for The Security Institute. As a director, Gillespie understands the place of senior leadership in cyber resilience and risk management.

The seminar is designed to promote and enhance understanding of the organisational threats that Boardrooms need to factor into resilience strategies. Attendees will also have first access to places on the forthcoming training course, again exclusively for senior leaders and the C-Suite, which will start in March 2017.

cybersecuritychallengeuk

Gillespie informed Risk UK: “The cyber threat landscape is high on the agenda of all Boardrooms. Many businesses have felt the impact of cyber attack, either directly or through supply chain partners. No size of business is immune and no kind of service spared the attackers’ attentions, with even hospitals being struck by ransomware.”

He added: “Recent research suggests that 82% of businesses say security is a CEO or Board-level concern, with two-thirds suggesting that they’re increasing cyber security spend. The additional spend is great, but without leadership and solid strategy it may not achieve anything near its potential, and cyber risk may not be reduced. We absolutely have to make sure Boardrooms are well briefed and understand how to go about effective cyber risk management.”

*Details of the seminar and how to book can be found at: http://www.advent-im.co.uk/breakfast-seminar-7th-december-cyber-security-awareness-for-business-leaders/. Alternatively, telephone 0121 559 6699 or 0207 100 1124 or send an e-mail to: bestpractice@advent-im.co.uk

Leave a comment

Filed under Risk UK News, Uncategorized

AXELOS announces launch of Cyber Resilience Best Practice Portfolio designated RESILIA

AXELOS Global Best Practice has unveiled RESILIA, the new Cyber Resilience Best Practice Portfolio will be launched in June 2015. The Best Practice Portfolio will help organisations gain the confidence they need to recognise, respond to and recover from cyber attacks on an effective and efficient basis.

Information is critical to the success of all innovation and is precious to any organisation. It’s also valued by a range of adversaries and, with the emergence and rapid development of a globally networked information environment, it’s now easier than ever before to target and attack that information.

To address the challenges of this ever-changing landscape, AXELOS has developed the RESILIA Portfolio to encompass detailed publications, training and awareness tools.

The RESILIA Best Practice Portfolio is designed to help any organisation define what good cyber resilience looks like for them, to guide them in effectively managing their cyber risks and to bounce back following an attack with minimal reputational or financial damage.

For organisations to harness this opportunity they have to adopt an enterprise approach that encompasses people, process and technology.

The AXELOS RESILIA Best Practice Portfolio is designed to help businesses mitigate their cyber security risks

The AXELOS RESILIA Best Practice Portfolio is designed to help businesses mitigate their cyber security risks

Nick Wilding, head of cyber resilience at AXELOS, said: “Inside your organisation there’s a powerful force that can protect your reputation, safeguard your information and keep customers close – it’s your people. The focus must be on aligning strategic priorities, operational systems and architectures with the ongoing training and involvement of all people across the business. Applying RESILIA as a Best Practice tool across the enterprise will enable companies to tackle their cyber risks with renewed confidence.”

Peter Hepworth, CEO at AXELOS, added: “Our existing Best Practice Portfolio, including IT Service Management enabled by ITIL and our Project and Programme Management frameworks that encompass PRINCE2 are used by millions of practitioners around the world to successfully manage their operations and to build business value. RESILIA joins that portfolio and strengthens the ability of any organisation to be more effective.”
The RESILIA Portfolio includes:

  • Cyber Resilience Best Practice – aligned with the ITIL lifecycle – that illustrates what good cyber resilience looks like and provides practical guidance for its strategy, implementation and management
  • Cyber Resilience Awareness Learning for building your ‘cyber smart’ workforce. Multiple awareness learning modules are offered in different formats and via multiple channels to get the right information to the right people at the right time across all parts of the business
  • Cyber Resilience Foundation and Practitioner Training and Certification designed for the IT and security professional community. This provides the practical guidance required in assessing, deploying and efficiently managing good cyber resilience within business operations
  • A Cyber Resilience Maturity Management Tool that will assess your current maturity level and propose appropriate improvement action plans.

Leave a comment

Filed under Risk UK News