Ten Ways To Elevate Public Sector Cyber Security

Across the past 18 months, a variety of major global hacking campaigns have plagued public sector groups; from government agencies, to hospitals, to educational institutions.

During the second quarter of 2023, cyber attacks affecting public sector organisations increased by 40 percent, as compared to the first quarter. By the third quarter of the year, attacks increased by 95 percent.

The growing volume and sophistication of incidents implies that public sector organisations have a tremendous challenge ahead of them.

Many public sector organisations aren’t secure enough, and some are languishing when it comes to improving security – likely because next steps are somewhat hazy. However there are tangible strategies that can be applied to help them build resilience in the face of changing cyber threats.

Ten ways to elevate public sector cyber security

1.    Secure Access Service Edge (SASE):  Can offer significant advantages for public sector organisations. In particular, it can ensure consistent policy enforcement, secure access-from-anywhere, and least-privileged permissions. SASE also automates certain tasks and reduces complexity for security administrators. In short, SASE is known for contributing to robust security while supporting flexible connectivity and simplifying security management for all stakeholders. 

2.    Endpoint Security:  Endpoints, from laptops, to servers, to mobile devices, to printers and scanners - are frequently considered to be the weakest elements in an organisation’s network. Around the world, millions of government and public sector employees use one or more of these types of devices everyday. In other words, there’s a lot of opportunity for hacker malintent that can lead to losses. In many cases, public sector entities under-appreciate the risk associated with endpoint devices, as it’s not viewed as a high requirement for IT procurement contracts, rendering endpoints inadequately secured. 

3.    Security Information & Event Management (SIEM):   These solutions are designed to provide context around detection of cyber security threats. An SIEM will collect logs from systems and security solutions across a network, placing them into a single, centrally managed location. Data collected via SIEM is aggregated from a number of different systems, which may use different numerical benchmarks. To allow administrators to perform comparisons and analyses, SIEM solutions perform data normalisation, making all comparisons “apples to apples”. SIEM tools can also offer event notifications and response (and much more). The most effective SIEMs are integrated into Security Operations Centres. 

4.    Threat Intelligence:   Public sector entities can obtain a broad view of potential threats through cyber security intelligence platforms. The platforms enable entities to obtain greater situational awareness, and subsequently, to take a more proactive approach to security. Value-packed insights inform admins about adversaries’ motivations, capabilities and modus operandi. All of this informs mitigation measures. Prevention and defence against imminent attacks becomes faster and more effective. While your organisation may not require automation within a threat intelligence solution, it’s a nice-to-have that will likely turn into a must-have in the future. 

5.    Automation:   Cyber security automation is intended to make processes and people more efficient and accurate. Automated tools can collect information, sequence the information, and analyse the information. In turn, they can detect infections and potentially remediate issues faster than an attack can progress, and faster than a human could apply a fix. Thus, automation stops attack lifecycles at-speed and scale.

6.    Consolidated Cyber Security Architecture:   In the past, public sector cyber security professionals leveraged a variety of products and tools. Each one was intended to address a different aspect of cyber security. However, these tools often aren’t interoperable, or the communication between them is poor. In addition, gaining visibility into a large number of tools is extremely challenging. Adopt a consolidated cyber security architecture. A consolidated architecture offers improved visibility, superior threat intelligence and simplified management across your entire environment. 

7.    Cyber Security Training:   Leaders need to provide cyber security training in a way that resonates with employees -  that ‘speaks the employees’ language,’ framing threats in terms of ideas and objectives that employees care about. 

Emphasise the personal dimension of risk. Talk about how organisational data loss could lead to distribution of information about employees and their families.

A breach could mean that employees and their family members experience identity theft, which could make it extremely difficult to renew passports, to enroll children in school, or to open new lines of credit, among other things.

8.    Adhere To Established Standards:   No need to reinvent the wheel. A number of independent industry groups have created high-level guidelines and frameworks that you can easily apply in order to make the most of your security efforts. Leverage frameworks to assist your organisation in advance of compliance audits. The use of ISO 27002, for instance, enables organisations to demonstrate compliance with multiple regulations at once, including HIPAA, Sarbanes-Oxley Act (SOX), PCI DSS and the Graham-Leach-Bliley Act. 

9.    Integrate Cyber Resilience Into Strategic Planning:   Cyber resiliency “is about keeping the lights on with no downtime,” says Sue Bergamo, executive advisor, CIO and CISO with BTE Partners. It refers to “the ability to anticipate, withstand, recover from and adapt to adverse conditions, stresses, attacks or compromises on systems that are used or enabled by cyber resources,” explains the National Institute of Technology and Standards. Assess and identify risks, create incident response plans, foster partnerships and collaborations across your organisation, and implement data protection measures. All of these efforts contribute to the development of cyber and business resilience. 

10.    Collaborate With Industry Partners:   Collaboration with other agencies, established groups and reputable cyber security vendors can enhance collective prevention and defence. Cyber security collaboration offers a low-cost means of significantly enhancing cyber threat detection, incident response and your overarching cyber security posture. 

Conclusion

Although the solutions listed above may not be mandated by your organisation or department, I would encourage all public sector bodies to exceed standards and expectations wherever possible.

Take an innovative approach and leverage these recommendations to strengthen the cyber security posture of your organisation and mature your cyber security capabilities.  

Deryck Mitchelson is Global CISO at Check Point Software Technologies

Image: Unsplash

You Might Also Read: 

How Does Your Board Measure Cyber Resilience?:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

« US Cyber Command Begins A Strategic Review
Cyber Warfare & The Future Of AI »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

CIO

CIO

CIO provides technology and business leaders with insight and analysis on information technology trends

sic[!]sec

sic[!]sec

sic[!]sec provide products and services for web application security.

Ntrepid

Ntrepid

Ntrepid products provide protection from web threats and enable organizations to safely conduct their online activities.

Telesoft Technologies

Telesoft Technologies

Telesoft Technologies is a global provider of cyber security, telecom and government infrastructure products and services.

DirectDefense

DirectDefense

DirectDefense is an information security services and managed services provider.

Jumio

Jumio

Jumio’s end-to-end identity verification and authentication solutions fight fraud, maintain compliance and onboard good customers faster.

Consensys

Consensys

ConsenSys is a global blockchain company. We develop enterprise applications, invest in startups, build developer tools, and offer blockchain education.

Finosec

Finosec

Finosec's mission is to change the way information security and cybersecurity are managed in banking.

Pixm

Pixm

Pixm’s computer vision based approach offers a truly unique and effective means to protect organizations from web-based phishing attacks.

Strike Graph

Strike Graph

The Strike Graph GRC platform enables Security Audits & Certifications.

Protected Media

Protected Media

Protected Media’s advanced cybersecurity ad fraud solution guards you against current and emerging threats across Connected TV, Display and Video advertising.

Brookcourt Solutions

Brookcourt Solutions

Brookcourt Solutions delivers cyber security, network monitoring technologies and managed security services to help secure and protect your organisation’s critical infrastructure.

LogicMonitor

LogicMonitor

LogicMonitor provides SaaS-based IT infrastructure monitoring services for on-premises and multi-cloud environments.

Gomboc.ai

Gomboc.ai

Gomboc solve cloud infrastructure security policy deviations by providing tailored remediations to the IaC (Infrastructure as Code).

PRE Security

PRE Security

PRE Security is leading the transition into the next era of AI cybersecurity with a new model: Predict & Prevent.

VAST Data

VAST Data

The VAST Data Platform delivers scalable performance, radically simple data management and enhanced productivity for the AI-powered world.