As we explained in the previous article, it is essential that we implement everything possible to protect our businesses against the emerging threats from Russia. We have answered the questions of how they would attack and why they would want to, and now we will answer one more – what can I do to protect my business from the emerging Russian cyber threats?
Protecting your business from Russian cyber threats
It isn’t easy defending your systems, and these emerging threats will be more sophisticated than most attacks we have experienced in the past – consider the following approaches when defending your business:
The right priorities
Get your priorities right! There is no point in protecting all of your data, systems, and networks from every type of cyber attack there is – a task that many have tried to undertake but none have ever succeeded – because it’s impossible. You must first determine which assets are in particular need of being defended. Prioritize the data that is critical to your company – unauthorized access to that data would be a disaster, so it must be defended. Ask yourself, “What data must always be available?” “What data needs to be stored?” If, after some reflection, your answer is “all of it” then it’s time to go back to the drawing board.
Have a ‘worst case scenario’ mindset
Stop avoiding it and worrying about it. Take the approach that no matter how good your defenses are you will be breached. Your cyber security team should be held accountable for ensuring compliance but, whilst remaining compliant is essential, it is completely irrelevant to the rapidly evolving threat landscape that we all must navigate.
Make the presumption that a cyber criminal is already exploiting your system. The need for investment in your company’s ability to withstand a cyber attack is critical. However, the ability to withstand attacks looks entirely different to different organizations (for example, you may have a business that needs to be available 24/7, so what if there is a failure or breach?) Do you have backups and procedures in place to ensure business continuity?
Strategic comms plan
In the event of a cyber breach you must have a strategic communications plan. When you realize that your company has been breached, you need to know exactly what you are going to say, who you are going to say it to, and how you are going to say it. Planning for this eventuality ahead of time is beneficial – you don’t want to be in the midst of potentially a business defining cyber breach and need to brainstorm the best course of action. We aren’t saying spend days – or weeks, in fact – dissecting every possible contingency, but we are, however, saying that you need to take a look at other organizations of a similar size and industry to learn from their successes and failures in regard to strategic communications – if it worked for them, why couldn’t it for you?
Safety in numbers
Information sharing is important. In the modern world we don’t communicate and help each other as much as we once did. If you are the victim of a cyber breach, there is a high chance that those in your vicinity or those of a similar size locally in your sector will be targeted too. Often, the shared information is untimely and can be quite unhelpful. (We mean, of course, you want to make sure your own organization is safe and secure before blowing the whistle for everyone else) But there are Facebook threat groups that can help your company gain access to information that is timely and relevant – this way everyone has a chance to act.
The right relationships
An unpopular method but a good one, nonetheless. Form a relationship with law enforcement. Traditionally, your relationship with law enforcement is a matter of the less they know about you the better the relationship is, but in regard to cyber security this no longer true. There are certain situations where the FBI may tip off a company to a potential threat – obviously, don’t count your lucky stars in the hope that the FBI is watching your business and will call you whenever a cyber attack happens, but be open to advice offered out by the government to defend your business.
Cyber security issues aren’t new; it is simply the Russian connection that is now in the public eye. Don’t go mad, stay methodical, but be serious. The old days are long gone, and it is no longer just your data that is at risk. Progress begins with you — what data and which systems are most important to your company? Devise a list of priorities. The walls you build to protect them won’t be perfect but, unfortunately, nothing you ever do in regard to cyber security will be. Your chosen approach will have to evolve with the times and reflect all changes in technology as they happen.
Cyber breaches are more common than ever – defend your systems from Russian attacks and otherwise!
Your Business – Prepared and Secure
At Grapevine, our team of dedicated engineers can meet any technical challenge you may come across. We take our time in getting to know you, your business, your employees, and your goals for the future so we can then find the best technological solution for you to guarantee constant security and progression. Our years of experience leave us primed and ready with all the tools needed to ensure a top-quality service, now and into the future. Contact our team and let us start our journey together today.
