A hybrid work environment is here to stay
But with cybercrime increasing in South Africa by 767% * resulting in an average cost of R6.4m to fix the breach, you need to protect your organisation against the rapid rise in the sophistication and pace of fraudsters.
With your employees working from home and in the office, it creates a massive opportunity for cybercriminals to attack. Protecting all endpoints across all employee devices is critical.
*Source: IT Web
Your employees devices know you
All PC, Android tablets, smartphones, and IoT devices:
- Passwords in the web browser autofill/file system.
- Credit card numbers in the web browser autofill/downloaded cc statements.
- Deleted files – All deleted files including ones not in the recycle bin can be recovered until physical storage space is overwritten.
- Bank account details – Downloaded bank statements.
- Recently visited sites – in the web browser cache/browser and history/Cookies.
- Name and address in the web browser autofill, Windows contacts and contact manager smartphone.
- Text messages – Text log stored on phone.
- Phone calls – Call log stored on phone.
- Contacts – Contact manager.
- Current location – Readable GPS.
- Recent locations – Photos and navigation apps.
7 stages of a cyberattack
They scan the target organisation or harvest information from social media.
Pair malicious code with a piece of malware to create a weapon.
They transmit the malware to the target via for example email, USB, or website.
Once delivered the malware code is triggered upon an action. This then exploits the vulnerability.
The malware is then installed through the weapon.
A command channel is used for remotemanipulation of the victim’s organisation.
They have hands on access and achieve their objective.
We must understand that cyber criminals have patience and work in a systematic manner.
Detect
- Asset discovery
- Detect
- Investigate
- Response
- Query
- Patch management
- Software distribution
Compliance
- Query
- Patch management
- Security configuration management
- Vulnerability assessment
- Compliance analytics
- Third-party anti virus management
- Self quarantine
- Add-on: PCI DSS
Lifecycle
- Asset discovery
- Patch management
- Software distribution
- Query
- Advance patching
- Remote control
- OS development
- Power management
- Sequenced Task Automation
Inventory
- Software / hardware inventory
- Software usage reporting
- Software catalogue correlation
- ISO 19770 software tagging
Patch
- OS patching
- Third-party application patching
- Offline patching
