Thursday 25 April 2024
Select a region
Business

"Cybersecurity is a journey, not a destination"

Tuesday 16 May 2017

"Cybersecurity is a journey, not a destination"

Tuesday 16 May 2017


A CI IT firm is urging companies to continually strengthen their systems against cyber attacks as the 'WannaCry' virus sweeps the globe.

Logicalis is warning local businesses to check systems are up-to-date, and ensure staff are properly trained, before cyber criminals prepare the next wave of malware.

Over one weekend, the WannaCry virus affected over 200,000 computers in 150 countries around the world, according to Europol.

Organisations include healthcare providers, transport companies, distribution firms, universities, and governments, everywhere from Russia to China, the US and the UK.

James Gillies, Technical Consultant, Logicalis, said: “Malware like this is designed to exploit vulnerabilities in a system, spreading rapidly through networks. Older systems, that are no longer fully serviced with updates may be more vulnerable.

“The mass-exploitation of vulnerable operating systems such as Windows XP was an ever- increasing risk and this weekend’s events have even been described as a ‘Wake Up call’ by Microsoft.”

Malware is on the rise, with damages from ransomware costing businesses an estimated $1.2 billion a year. The payment demands from WannaCry alone are, so far, at  $230 million.

When trying to avoid becoming a victim of cybercrime, Logicalis recommends three key layers of defence: patching, and next generation virus technologies; 24/7 security monitoring by a Security Operation Centre; and security awareness training to help staff learn how to deal with fraudulent emails.

“Cybersecurity is a journey, not a destination, and there is no silver bullet, however, businesses need to develop a security mindset and work with trusted advisors if they are going to improve their chances of not becoming a victim of cybercrime.

“Keeping your system up to date with next generation virus technology and applying patches to protect software against vulnerabilities is the first step. Monitoring your systems 24/7 to identify breaches when they occur so you can minimize the damage, is the next.

“According to KnowBe4, 3% of exploits attack the vulnerabilities in a system, but 97% of exploits attack the human via social engineering. With people still the weakest link, regular training programs, backed up with simulated phishing attacks to gauge staff responses to such attacks are probably the most important way to protect your business.” 

Sign up to newsletter

 

Comments

Comments on this story express the views of the commentator only, not Bailiwick Publishing. We are unable to guarantee the accuracy of any of those comments.

You have landed on the Bailiwick Express website, however it appears you are based in . Would you like to stay on the site, or visit the site?