Cybersecurity 101: Protecting Your Organization in 10 Steps

Email     |     Share  
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12
Next Cybersecurity 101: Protecting Your Organization in 10 Steps-3 Next

Step 2: To contain or not to contain?

After identifying the nature, extent, and severity of the attack, team members are faced with two options: Contain it or proceed directly to removal.

It is recommended that the team contain and stop the attack. This involves quarantining the compromised host(s) or system(s) or disabling certain functions, removing user access or login to the system, and determining the access point and blocking it to prevent ongoing damage.

Keep in mind that containment is appropriate when dealing with a 'drive-by' type attack, however, in the case of advanced malware or an APT that watches and alters its techniques depending on the organization's reaction, the more effective approach could be to proceed directly to step three and coordinate the removal process.

2013 was a significant year for the IT security industry, due in large part to massive attacks on companies like Target, Michaels and Yahoo. Prior to these near brand-crushing incidents, terms like "hacker," and "data breach" had yet to make their appearance within mainstream media. Security experts predict that more and more organizations will fall victim to similar attacks; hackers spend 100 percent of their time looking for vulnerabilities to capitalize on, and defenders are tasked with multiple competing priorities and need to closely protect all of their vulnerabilities. As a result, organizations must maintain vigilance against such nefarious behavior. Hexis Cyber Solutions, a provider of advanced cybersecurity solutions for commercial companies and government agencies, outlines 10 steps organizations should take to improve their response strategy and better mitigate the impact of attacks in the future.

 

Related Topics : Unisys, Stimulus Package, Security Breaches, Symantec, Electronic Surveillance

 
More Slideshows

PAM PAM Solutions: Critical to Securing Privileged Access

To protect the company from those insiders who abuse their privileged access and from hackers with stolen credentials, many companies are turning to a privileged access management (PAM) solution. ...  More >>

Fake news How Can We Fix the Fake News Problem?

Is fake news a security issue? Some say yes, as it can be used as a social engineering tool to spread disinformation and conceivably to get unsuspecting users to click on malicious links. ...  More >>

blockchain The World According to Blockchain

Blockchain comes with many costs and is surrounded by confusion. Here, we examine realistic use cases, drawbacks and the potential of blockchain. ...  More >>

Subscribe to our Newsletters

Sign up now and get the best business technology insights direct to your inbox.