Story image

Take the initiative in defending your data

09 Aug 2017

With news headlines featuring a steady stream of data breaches, leaked emails and global cyberattacks, it’s hard to escape the impression that this threat is escalating. With this growing awareness, New Zealand organisations are increasingly coming to understand that a digital security program is a necessary part of doing business in the modern world.

Despite this new awareness of the threat, for many the solution is less well understood. As a result, defensive strategies are improperly prioritised. Many businesses simply react to security events, rather than preparing for them. Security budgets are misdirected towards shiny toys rather than the IT hygiene fundamentals which have the greatest impact.

When security professionals do get brought in, their effectiveness is limited by organisations who incorrectly believe that placing the tester in a knowledge vacuum to simulate an external attacker is a one-size-fits-all approach.

While organisations with a mature security program can gain value from such exercises, those still developing their security posture may benefit more from closer collaboration with technical experts.

Too often, security professionals are consulted with only when a project is almost complete. Find problems early. Either they incur time and disruption losses in resolving these problems or they accept the risks and proceed with deployment with the intent of finding budget for fixes sometime in the future.

A shift is starting to occur, though. Smaller enterprises are starting to understand what those with more mature information security programs have understood for some time. The cost of retrofitting security to a solution far exceeds that of investing in security review and consultation during the design and planning stages.

Businesses that are in a strong position to defend against the current threat landscape have processes and templates in place to ensure that new systems are built with secure-by-default platforms as a foundation.

Modern organisations bake security into their every operation. They engage with security experts who can provide guidance and context such that their businesses can take the initiative in making informed risk decisions, rather than scrambling to clean up security issues when it is more costly.

Click here to find out more about how Lateral Security can help you.

Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.
How blockchain could help stop video piracy in its tracks
An Australian video tech firm has successfully tested a blockchain trial that could end up being a welcome relief for video creators and the fight against video piracy.
IBM X-Force Red & Qualys introduce automated patching
IBM X-Force Red and Qualys are declaring a war on unpatched systems, and they believe automation is the answer.
Micro Focus acquires Interset to improve predictive analytics
Interset utilises user and entity behavioural analytics (UEBA) and machine learning to give security professionals what they need to execute threat detection analysis.
Raising the stakes: McAfee’s predictions for cybersecurity
Security teams and solutions will have to contend with synergistic threats, increasingly backed by artificial intelligence to avoid detection.
Exclusive: Ping Identity on security risk mitigation
“Effective security controls are measured and defined by the direct mitigation of inherent and residual risk.”