by Andy Obuchowski
Andy Obuchowski
Cybersecurity is a hot discussion topic around the boardroom and a growing concern for many businesses. What can you do to help mitigate the risks of a cyberattack in your company?
IT risk assessment: Understand your network. Evaluate your IT infrastructure to identify security gaps against industry-recommended guidelines and develop a remediation road map based on your appetite for risk.
Network vulnerability testing: Trust but verify. Are you confident that the controls you have implemented are protecting your network and corporate secrets? Have your vulnerabilities identified through network testing before someone else does this for you at 3 a.m and steals your information.
Vendor management: Out of sight is not out of mind. Know the policies and practices of organizations you provide with your corporate data. Responsibility and liability don’t end once the information handoff has occurred.
Security awareness training: Secure the human. Social engineering through phone calls or phishing emails is an easy way to gain access to your network. Why steal the password when I can just ask for it? Employees should understand the risks associated with common everyday activities such as installing software, using free Wi-Fi networks, and exploring the Internet.
Incident response plan: What do we do? Develop and test your game plan before an incident occurs. Identify key internal team members and qualified external vendors ahead of time.
