Three Step Pogram: Pre-Breach Remedies To Contain The Costs Of A Cyber Attack

Data breaches are very costly. Organisations should consider three basic steps to ensure they are prepared to remedy a future breach.

Over the last year there have been a variety of high-profile security breaches ranging in severity, from TalkTalk, which was fined £400,000 for its 2015 breach, to Yahoo, which had $1 billion of its potential value wiped by the news of its own hack.

When looking at most security breach cases it’s clear that the size of their financial implications is often vastly underestimated. Companies need to put the same amount of effort into protecting against the immediate aftermath of a breach, as they do in its initial prevention.

Mobile breaches present a particularly unique challenge for organisations. Responding to any cyber breach is complicated, but the complexity is often worsened due to the personal nature of a mobile device itself.

A tangled web of data cross-pollination is being created due to the increasing popularity of BYOD and work emails on personal devices. This means that productivity can increase among employees, but with greater mobile use comes significant complications around clean-up and remediation when those mobiles are breached.

With employees innocently pushing forward with productivity, IT departments must take control of the security implications.

A recent study from Wandera found that companies spend three times as much on remedying a mobile security breach than they could have spent to simply prevent it in the first place.

In the UK alone, the average cost of remedying an enterprise mobile security breach stands at an astounding £167,000. To avoid this, organisations need to consider three basic but crucial steps to ensure they are sufficiently prepared to remedy a future breach.

1.    Assess and notify

This should be at the top of the to do list when a breach occurs. The news will need to be shared within your organisation immediately. Too often businesses are silent when data breaches occur, as though the fear of external discovery outweighs the importance of having a wider discussion throughout the organisation.

In terms of a mobile data breach, businesses need to realise that the situation is different. The split personality of a mobile device, by definition, involves an individual as well as the business. The faster the company notifies everyone involved and shares intelligence on what was breached, the less of a ripple effect the breach will have.

Passwords will need to be changed, including all device passwords, not just those used within the company, but any that were put at risk. Defensive steps will also need to be taken if sensitive data such as contact lists, credit cards, business or personal images and location information was leaked.

2   Perform a forensics analysis

To truly clean up a breach, there must be a clear understanding of how it occurred and what was put at risk. Performing a post-breach forensics investigation must start with visibility across the mobile fleet in the first place.

To get ahead before a breach occurs, companies should invest in a mobile threat defence solution that can provide data on how the breach occurred, which users were impacted and provide clues as to which data may have been compromised.

With complete visibility of the issue, businesses will be aware of what the next move needs to be to minimise further damage.

3.    Improve defences

The visibility that is obtained during forensics investigation can also pave the way for improved defences via policy controls in the future. Typically, IT teams roll out an open mobility program to start allowing users to install their own apps and ensure there are no restrictions on websites they can access.

As breaches occur, compliance violations are observed and as productivity concerns are raised, IT will often need to take a step back and implement mobile data policies to ensure that these corporate resources are used effectively and securely.

Companies need to take a close look at their access policies after a breach and ensure that adequate steps are in place to protect mobile data, while simultaneously safeguarding users’ productivity.

Security breaches don’t have a consistent formula or uniform. They come in different shapes, sizes and levels of damage, meaning there isn’t one way for businesses to protect themselves against a breach.

The sad reality is that it’s a case of ‘when’ a security breach will happen, instead of ‘if’ now, and organisations must be prepared for the aftermath.

As the probability of a hack increases, and the use of employee devices increases alongside this, organisations must take the above three steps into consideration to ensure that issues after the breach are minimised.

Information-Age:       Tech Jobs Would Be Great, If It Wasn’t For The Users:

 

 

« Social Media & The New Advertising Model (£)
Spies Use Tinder »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Huawei

Huawei

Huawei is a leading global ICT solutions provider. with end-to-end capabilities across the carrier networks, enterprise, consumer, and cloud computing fields.

National Response Centre for Cyber Crime (NR3C) - Pakistan

National Response Centre for Cyber Crime (NR3C) - Pakistan

National Response Centre for Cyber Crime (NR3C) is a law enforcement agency in Pakistan dedicated to fighting cyber crime.

Detectify

Detectify

Detectify is a web security service that simulates automated hacker attacks on your website, detecting critical security issues before real hackers do.

Living Security

Living Security

Living Security specializes in metric driven and engaging security awareness solutions that reduce risk by increasing security culture and changing employee behaviour.

DigiByte (DGB)

DigiByte (DGB)

DigiByte (DGB) is a rapidly growing global blockchain with a focus on cybersecurity for digital payments & decentralized applications.

CyberKnight Technologies

CyberKnight Technologies

CyberKnight Technologies is a cybersecurity focused value-added-distributor (VAD) headquartered in Dubai and covering the Middle East.

Char49

Char49

Char49 specialize in Penetration Testing, Red Team Assessment, Social Engineering and Security Research.

Titan Labs

Titan Labs

Titan Labs is a Cyber Security Consultancy that provides advice and technical expertise to government, international finance and telecommunications providers.

SecAlliance

SecAlliance

SecAlliance is a cyber threat intelligence product and services company.

Bitdefender

Bitdefender

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide.

Canadian Cyber Threat Exchange (CCTX)

Canadian Cyber Threat Exchange (CCTX)

The CCTX is Canada’s not-for-profit, private-sector cyber threat sharing hub and collaboration centre.

Robust Intelligence

Robust Intelligence

Robust Intelligence enables enterprises to secure their AI transformation with an automated solution to protect against security and safety threats.

PowerDMARC

PowerDMARC

PowerDMARC is a domain security and email authentication SaaS platform that helps organizations protect their domain name, brand, and emails against unauthorized use.

Sasken Technologies

Sasken Technologies

Sasken’s Cybersecurity Services enables enterprises to develop, maintain, and take digital products to the market with security postures that empower operational excellence.

Apex iQ (ApexiQ)

Apex iQ (ApexiQ)

ApexiQ is a continuous asset assurance platform that empowers you with the confidence to make better data-driven decisions and take automated action to reduce your risk.

Whalebone

Whalebone

Whalebone develop user-centric, no-installation network security products for telcos, internet service providers, enterprises, public institutions, and governments.