Inside Cyber

CHAPTER 25The Urgency of Having a Cyber Risk Management Plan

The most effective cyber defense remains a complete risk management plan. A practical cybersecurity risk management for any organization will necessitate identifying risks and reorganizing its strategies to recognize, neutralize, and reduce emerging cyber threats.

Currently, the majority of cyber defense solutions typically include five stages of risk management components:

1. Determine which assets are most important.
2. Guard by restricting access.
3. Look for any breaches.
4. React to stop the intruder.
5. Recuperate by going back to your routine.

Including a strategy that reduces the time that criminals can stay in the system and limiting the exfiltration of data could provide another layer of security.

I created the following list based on the important categories found on many typical risk plans, including some of the overarching elements that should be considered in all cybersecurity frameworks:

• Carry out vulnerability assessments of all devices (including work-from-home devices) connected to governing networks.
• Carry out comprehensive scanning and testing to detect malware in code and configurations that can be exploited, especially with legacy systems.
• Use multilayered and in-depth cybersecurity protections including strong passwords, multifactor authentication, and strong endpoint protections. Encrypt sensitive assets, especially data in transit. Use firewalls, antivirus detection software, and continually audit networks. ...